My server IP is always being blocked by spamhaus

[KYPREO]

I wouldn't have thought lack of DMARC alone is enough to get you blacklisted. This is a newer higher standard of verification.

Do you have SPF or DKIM set up? That should be the first step before DMARC.

Is there a MX entry in your DNS matching the name of your mail server?

Have you done a reverse DNS check on your mail server? If a reverse DNS check on the origin IP of sent emails does not match the fully qualified domain of your mail server, this will be sure to trigger your emails as spam.

[KYPREO]

PS you can use this tool of ths previously listed tester does not work for you: https://mxtoolbox.com/SuperTool.aspx (select the Test Email Server option and Email Deliverability option)

[WelshPaul]

however, that is something that the host should have found the first time you asked them for help.

Not unless you have a shared hosting plan or managed VPS/Dedicated server.

If you get a VPS or Dedicated server then the onus is on you to set it up and configure it correctly and the majority of hosts won't entertain such support requests.

[thecoalman]

Today it was blocked again

I doubted DMARC was the issue. SPF, DKIM and last but least DMARC can help keep email from going to the recipients spam box. It shouldn't cause it to get blocked let alone the IP getting blocked.

This was a new IP they issued you?

You said this was VPS, is it a WHM control panel? There is section in there under email that logs incoming and outgoing email. You may want to look to see if there is a bunch of unusual activity. If you are using any other software or scripts double check them.

[</Solidjeuh>]

They investigated this a bit further. My "_DMARC" was good now, but I was still missing a "SPF record". They see no more errors, and should be okay now.

[thecoalman]

Like I said the SPF record is good for keeping emails out spam box, unless things have changed and they are clamping down I doubt it's causing the IP to be blocked. Most sites don't have one because it's really the site owner that needs to set it up. The host can't really set this up because if for example you were using external email service this can screw you up, and incorrect SPF record is worse than no record.

By all means set it up but make sure it's right. If you are using WHM email can be sent through "main" IP or if you have second IP through that. You need to make sure it's the right IP. This is what i have been using

Code: Select all

v=spf1 mx ip4:123.123.123.123 mx:the.domain.com -all

The domain can be different that the domain, e.g, example above with WHM server. If the you are seding through main IP it;s going to be the hostname. The IP is the IP sending the email. -all is probably not what they are using but you should use it.

https://www.dmarcanalyzer.com/spf/how-t ... xt-record/
-all Fail – servers that aren’t listed in the SPF record are not authorized to send email (not compliant emails will be rejected).
~all Softfail – If the email is received from a server that isn’t listed, the email will be marked as a soft fail (emails will be accepted but marked).
+all We strongly recommend not to use this option, this tag allows any server to send email from your domain

One other thing check the Return-Path in the header of sent email, if it's not the board email under emails settings set Force from email address: to yes.

[</Solidjeuh>]

Thank you all for the help!
@thecoalman, I'm using PLESK, so this should be okay?
v=spf1 mx ip4:46.228.199.52 mx:supportforum.be -all No need to add IP6 ?

[thecoalman]

Look at an email header and make sure the domain is correct, in my case since it's sent through the "main" IP it's actually the hostname. Use one of the email testers to confirm it's right. This is not something you want to screw up because it will cause emails to bounce especially with the -all.

I've been using that for years now and AFAIK I do not have any trouble with email delivery, they go to inbox. If you have the DMARC setup you'll get reports on it, you might want to look at them initially.

[mxp1l0t]

Check out this link for information:

https://www.spamhaus.com/resource-cente ... -going-on/

[GTI]

This has become a regular thing on several phpBB forums in the past few months.

I have seen the following 2 suggestions on here lately...

• One suggested someone uses a VPN to avoid the problem.
• The other suggested someone types their message into notepad and then copies and pastes it into phpBB to post it.

If I start expecting my forum members to use VPN's or start writing their message elsewhere and copying it into phpBB my forum will die, that's to much to ask of members, nobody should have to stuff like that to be able to post a message on a forum.


Some forums are losing members because of this as when a member goes to sign up, he gets a message saying he's a spammer, his IP is then blocked which means he is unable to use the contact link and is unable to contact the forum administrator.

[Kailey]

What does any of that have to do with a SERVER IP being blacklisted?

[GTI]

What does any of that have to do with a SERVER IP being blacklisted?

It's the fact that spamhaus is causing issues with phpBB in more ways than one.
Things affected so far are the receiving of mails and also some new members are being listed as spammers and blocked from accessing the site.

[[Dimetrodon]]

Is attempting to use spamhaus even a requirement to keep your phpBB board clean from spam? It is probably better to use the moderation queue or the authorized for urls extension. Good questions and anti-spam measures would surely keep most of it out anyway.