How to whitelist IP addresses for email routing.

LuisGonzalezLT

For two weeks now email I send out from my HostGator hosted email account gets rejected due to Cloudmark CSI-Global blacklisting. HostGator tech support said I needed to talk to my ISP tech support and have them whitelist the IP addresses with Cloudmark. The addresses I have had issues with so far are:

173.239.198.28

173.239.198.62

173.239.198.103

Some example error messages below showing the blacklisting:

host 34.217.196.71 Delay reason: SMTP error from remote mail server after end of data: 421 173.239.198.28 is listed on Cloudmark CSI-Global. 

host 34.223.136.48 SMTP error from remote mail server after end of data: 421 173.239.198.62 is listed on Cloudmark CSI-Global. 

HT_Greenfield

According to www.whois.com, the 173.239.198.0 - 173.239.198.255 range of IP addresses is currently reassigned by LogicWeb Inc. to a VPN service provider, out of a larger range of IP addresses currently registered to LogicWeb. You'd have to contact your VPN service provider to address anything happening with your VPN service. I don't think Spectrum/Charter has anything to do with it.

LuisGonzalezLT

https://help.returnpath.com/hc/en-us/articles/360045919892-Cloudmark-CSI-blocklist

LuisGonzalezLT

It appears I need Spectrum tech support to go to the CLoudmark CSI IP Reputation Remediation Portal here:

https://csi.cloudmark.com/en/reset/

and submit the above IP addresses.

Can I get tech support to do that, please?

LuisGonzalezLT

Ah. I do see a VPN in this. Unloaded that and tried again. No reply back so far and nothing in the target email inbox. Guess I need to wait the few days until I get an error reply back and see what address that test went through :-(

LuisGonzalezLT

I have added outlook.exe on this POC to tunnel areound the VPN and confirmed it does so by sending an email to an account in the same domain with and without the tunnel active.

THROUGH VPN

Received: from [173.239.198.59] (port=50807 helo=PC1)

WHOIS = LOGICWEB (this is the VPN provider)

OUTLOOK EXCLUDED FROM VPN

Received: from cpe-174-104-214-247.neo.res.rr.com ([174.104.214.247]:53356)\

WHOIS = RRMA (rr.com is the old roadrunner domain still in use by Spectrum)

174.104.214.247 is only shoing up in a few blacklists so I sent some emails to various people. Still no joy :-(

LuisGonzalezLT

omg - so the problem ended up being completely unrelated to ip addresses.

Turns out the source email domain did not have DKIM and SPF properly configured! Got that setup in the domains DNS and once that change propogated around mail began to be delivered once again.

Just wanted to post that for anyone stumbling on this thread.

Thanks all!