We've had another sender having the same issue of the spam site message.
> This message was created automatically by mail delivery software
(Exim).
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es)
failed:
>
> jar...@asila.org
> SMTP error from remote mailer after RCPT TO:<jar...@asila.org>:
> host mail.asila.org [38.118.210.9]: 550 5.2.1 Mail from
207.69.195.71
> refused:
> spam site.
>
> ------ This is a copy of the message, including all the headers.
------
>
> Return-path: <sand...@earthlink.net>
> Received: from user-3cf80v6.dsl.mindspring.com ([216.244.3.230]
> helo=SandyMain)
> by pop-siberian.atl.sa.earthlink.net with smtp (Exim 3.36 #1)
> id 1GIUo3-0000cb-00; Wed, 30 Aug 2006 14:28:55 -0400
> Message-ID: <01f201c6cc62$26763460$1a02a8c0@SandyMain>
> From: "Sandy Eisenberg" <sand...@earthlink.net>
> To: "Meelissa Jarvis" <jar...@asila.org>
> Subject: need PO numbers
> Date: Wed, 30 Aug 2006 11:28:54 -0700
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
> boundary="----=_NextPart_000_01EE_01C6CC27.79AE6160"
> X-Priority: 1
> X-MSMail-Priority: High
> X-Mailer: Microsoft Outlook Express 6.00.2900.2869
> Disposition-Notification-To: "Sandy Eisenberg"
<sand...@earthlink.net>
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
>
> This is a multi-part message in MIME format.
>
> ------=_NextPart_000_01EE_01C6CC27.79AE6160
> Content-Type: multipart/alternative;
> boundary="----=_NextPart_001_01EF_01C6CC27.79AE6160"
>
Now, she's using earthlink which has rotating MX records (similar to
concentric). Could this be an issue where one MX record would be listed if
you do a DNS but then not be listed if you redo the DNS lookup?
I had this problem before with concentric and then it cleared up for no
apparent reason.
>I have Exchange 2003 with Symantec anti spam. A outside user is trying to
>email our organization and they received the following error message. Do you
>know if our email server is rejecting the sender because of them being on a
>spam list? Would it be the Symantec or Exchange doing the rejection? What
>can we do to white list them?
38.118.210.9 is your server
207.69.195.71 is earthlinks server
207.69.195.71 is listed in 7 DNSRBL's that I can see
(http://www.dnsstuff.com/tools/ip4r.ch?ip=207.69.195.71)
Whatever it is that you're running on your Exchange server that uses
DNSRBLs and would send "550 5.2.1 Mail from 207.69.195.71 refused:
spam site." is what you want to look at.
My guess is that it's Symantec.
--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.p...@getronics.com
Or to these, either: mailto:h.p...@pinkroccade.com mailto:melvin.mcp...@getronics.com mailto:melvin.mcp...@pinkroccade.com