cancel
Showing results for 
Search instead for 
Did you mean: 
allen.yu
Level 7

Emails blocked by McAfee

Hi Support at McAfee,

My name is Allen, I'm working in an insurance broking company as IT Support in the Australia.

Currently our email system IP 59.100.72.12 is blocked by McAfee .

We have email to SaaS_falsepositives@mcafeesubmissions.com  to adjust the reputation of our IP address,

however, we have same reply every time, but never fixed the problem. 

i have also posted a feedback on the website below, had a reply said IP adjusted, but wasn't fixed issue either.

http://www.mcafee.com/threat-intelligence/ip/default.aspx?ip=59.100.72.12

It's more than 2 weeks now from the first email we received from McAfee,

I found there are simliar issues happening in this form, hope someone will help me out Thanks.

Update:  we were reciveing ther 554 error but now we having a different one.

14:55:01.449 Starting thread 2704 for new message B532915150000.000000000001.0001.mml 186370 bytes, Threads(New:1, Deferred:0, Static:0, DNS:1)

14:55:01.449 Thread 2704 (v7.2.2.6606) running

14:55:01.449 Attempting delivery of B532915150000.000000000001.0001.mml via route ansvar.com.au (MX) - *

14:55:01.449 Delivering to extmail1.ansvar.com.au via IPv4 protocol

14:55:01.449 Delivering via MX(ansvar.com.au) A|AAAA(extmail1.ansvar.com.au) IP(203.134.29.196):25

14:55:22.480 EstablishConnection: Failed to connect to 203.134.29.196  - err 10060 - WSAETIMEDOUT

14:55:22.480 No available IPv4 route for extmail1.ansvar.com.au

14:55:22.480 Delivering to ansvar.com.au.inbound10.mxlogic.net via IPv4 protocol

14:55:22.480 Delivering via MX(ansvar.com.au) A|AAAA(ansvar.com.au.inbound10.mxlogic.net) IP(208.65.144.3):25

14:55:24.137 EstablishConnection: Failed to connect to 203.134.29.196 Failed to connect to 208.65.144.3  - err 10061 - WSAECONNREFUSED

14:55:24.137 Delivering via MX(ansvar.com.au) A|AAAA(ansvar.com.au.inbound10.mxlogic.net) IP(208.65.144.2):25

14:55:25.808 EstablishConnection: Failed to connect to 203.134.29.196 Failed to connect to 208.65.144.3 Failed to connect to 208.65.144.2  - err 10061 - WSAECONNREFUSED

14:55:25.808 Delivering via MX(ansvar.com.au) A|AAAA(ansvar.com.au.inbound10.mxlogic.net) IP(208.65.145.2):25

14:55:27.512 EstablishConnection: Failed to connect to 203.134.29.196 Failed to connect to 208.65.144.3 Failed to connect to 208.65.144.2 Failed to connect to 208.65.145.2  - err 10061 - WSAECONNREFUSED

14:55:27.512 Delivering via MX(ansvar.com.au) A|AAAA(ansvar.com.au.inbound10.mxlogic.net) IP(208.65.145.3):25

14:55:29.246 EstablishConnection: Failed to connect to 203.134.29.196 Failed to connect to 208.65.144.3 Failed to connect to 208.65.144.2 Failed to connect to 208.65.145.2 Failed to connect to 208.65.145.3  - err 10061 - WSAECONNREFUSED

14:55:29.246 No available IPv4 route for ansvar.com.au.inbound10.mxlogic.net

14:55:29.246 Delivering to ansvar.com.au.inbound10.mxlogicmx.net via IPv4 protocol

14:55:29.246 Delivering via MX(ansvar.com.au) A|AAAA(ansvar.com.au.inbound10.mxlogicmx.net) IP(208.65.144.2):25

14:55:30.933 EstablishConnection: Failed to connect to 203.134.29.196 Failed to connect to 208.65.144.3 Failed to connect to 208.65.144.2 Failed to connect to 208.65.145.2 Failed to connect to 208.65.145.3 Failed to connect to 208.65.144.2  - err 10061 - WSAECONNREFUSED

14:55:30.933 Delivering via MX(ansvar.com.au) A|AAAA(ansvar.com.au.inbound10.mxlogicmx.net) IP(208.65.145.2):25

14:55:32.652 EstablishConnection: Failed to connect to 203.134.29.196 Failed to connect to 208.65.144.3 Failed to connect to 208.65.144.2 Failed to connect to 208.65.145.2 Failed to connect to 208.65.145.3 Failed to connect to 208.65.144.2 Failed to connect to 208.65.145.2  - err 10061 - WSAECONNREFUSED

14:55:32.652 No available IPv4 route for ansvar.com.au.inbound10.mxlogicmx.net

14:55:32.652 Thread exiting for B532915150000.000000000001.0001.mml after 31203 millisecs

14:55:32.652 Route ansvar.com.au (MX) - * temporarily unreachable will retry for psiatos@ansvar.com.au

14:55:32.652 Message B532915150000.000000000001.0001.mml to recipient(s) psiatos@ansvar.com.au will retry

Regards,

Allen Yu

Message was edited by: allen.yu on 18/03/14 11:06:43 PM
0 Kudos
6 Replies
tlange
Level 13

Re: Emails blocked by McAfee

allen,

the forum you need to post to is https://community.mcafee.com/community/business/system/tops?view=discussions&start=0

that is the mcafee saas forum.

Peacekeeper
Level 20

Re: Emails blocked by McAfee

Moved it to SAAS area.

allen.yu
Level 7

Re: Emails blocked by McAfee

Thanks Guys.  i had a different reply 2 days ago..( it doesn't look like come from template)

our delay emails were all went out this morning around 5 am Melbourne Time.  hopelly this mean our email won't get block again.

i will make couple test email later today.... if it's wokring i will come back to close the discussion..

Thank for your both....

Regards,

Allen Yu

Hi Allen,

The IP was also on our firewall.  It has been removed.

Please allow 24 hours for the changes to propagate.

McAfee Labs

Messaging Security

0 Kudos
allen.yu
Level 7

Re: Emails blocked by McAfee

we are getting a different error now...  i look like if user hasn't put our email address in their whitelist, it will still block our emails .... please help..

Your message:**********************allen.yu@ihgroup.com.au

   Subject: RE: Fw: Mail delivery failed - I request id ##891##

Could not be delivered because of

Server refused mail at END OF DATA - 554 Denied [CS] [83352335.0.139833.00-2315.201386.p02c11m086.mxlogic.net] (Mode: normal)

The following recipients were affected:

    Chris.Fradley@

    owen.chandler@

emails removed for your safety Mod

Additional Information

======================

Original Sender:    <******************

Sender-MTA:         <192.168.2.50>

Remote-MTA:             <208.65.144.2>

Reporting-MTA:      <mail.insurancehouse.com.au>

MessageName:        <B533253310000.000000000001.0001.mml>

Last-Attempt-Date:  <15:10:26 Wed, 26 March 2014>

Message was edited by: Peacekeeper on 26/03/14 4:23:45 PM
0 Kudos
cascadia
Level 12

Re: Emails blocked by McAfee

Allen,

The errors 554 Denied and 554 Denied [CS] are both high spam score errors, the latter being a Critical Spam rating. I would recommend forwarding the NDR to saas_falsepositives@mcafeesubmissions.com for review, as that gets the information directly to Messaging Security.

0 Kudos
allen.yu
Level 7

Re: Emails blocked by McAfee

Hi Brad,

I have sent this error message to saas_falsepositives@mcafeesubmissions.com since the first day we had this issue.

At beginning we were having this 554 bounce back message, after a while we are stopped getting the bounce back message and even when recipient add our email address to their whitelist, email will not be sent out from our gateway.

from 21st March the email will sent out from our gateway, but 554 error continue ...

i just sent another email to saas_falsepositives@mcafeesubmissions.com .. hopefully this time will get helped..

Regards

0 Kudos