[SC-Help] Re: Listed on the blacklist and can't find out why

[John E. Malmberg]

Wallace, David K. wrote:
> Over the last 2 days, our company's domain has been listed on SpamCop's 
> black list.  We have been given the following reason:
> a.. System has sent mail to SpamCop spam traps in the past week (spam traps 
> are secret, no reports or evidence are provided by SpamCop)
> 
> Based on your definition of "Spam Traps", I'm going to make the following 
> assumption:
>     This means if a company subscribes to SpamCop's service, they create 
> fictitious email addresses (example: bobby at companyabc.com);  Then, if any 
> emails get sent to bobby at companyabc.com, they are making the assumption that 
> these emails are spam emails, and will put the originating email domain in 
> their black list.

Totally incorrect assumption.
> My questions are:
> 1. Do you do it by Domain Name or MX Record? (meaning, I don't want to get 
> black listed if someone is spoofing our name)

Neither.

> 2. How do we find out what email address or domain you are referring to?  If 
> this is an accidental error by a user who has misspelled a users address, 
> how can I stop it unless I know what is being done wrong?

Post the I.P. address that you think is listed.  Spamcop.net only deals 
with the I.P. address that delivered the spam to the spamtrap.

> I feel like I'm looking for a ghost, because I know mass emails are not 
> being sent out from my company, but I have nothing else to search for to 
> find the root cause of the issue.

Many people have made that claim and discovered that they were wrong.

If you have any security hole on your network, spammers will use it to 
send out spam.

The other issue is auto-responders that automatically send a new message 
back to the forged addresses in viruses or spam.  If you have any thing 
that does that, spammers and especially viruses will use your mail 
server as part of a denial of service attack against others.

-John
wb8tyw at qsl.network
Personal Opinion Only