Gmail: "mail sent from your IP address has been blocked."

1 
Our system has detected an unusual 550-5.7.28 rate of unsolicited mail originating
from your IP address. To 550-5.7.28 protect our users from spam, mail sent
from your IP address has been 550-5.7.28 blocked. Please visit 550-5.7.28
https://support.google.com/mail/?p=UnsolicitedIPError to review our 550
5.7.28 Bulk Email Senders Guidelines. h16si13481148wml.155 - gsmtp

How can I look into this? Has my server been hacked? Does this mean I have to change the ip of my box?

2

First, read this page;) Add your site to postmaster.google.com.
Second, look in your mail.log file and verify how much mail is sent to google
the mail.log file is in /var/log/

I’m not sure, but doing this grep, will probably give you some idea how much mail is sent to google recently

grep “smtpd.*client.*google” /var/log/mail.log

Solve the problem, don’t change the ip address of the box.

other good check is: https://mxtoolbox.com

3

grep google /var/log/mail.log | wc -l
212

OK that cannot be a problem

First, read this page;) Add your site to postmaster.google.com.

Thank you. I now did that. I read that DKIM might be a problem too? Does mail-in-a-box use DKIM signing?

other good check is: https://mxtoolbox.com

image
image746Ă—138 10.6 KB

I think Google is just being a bully at this point.

4

Verify with mxtoolbox if your ip, your miab domain or the sending domain is on a blacklist

5

I like to install and watch pflogsumm as it will show you unusual activity. So if a mailbox gets compromised and sends spam, you will definitely notice it.

6

I contacted the Gmail team through Troubleshooting for senders with email delivery issues - Gmail Help

Hope they can fix the problem…

Verify with mxtoolbox if your ip, your miab domain or the sending domain is on a blacklist

I’m not blacklisted anywhere.

I like to install and watch pflogsumm as it will show you unusual activity. So if a mailbox gets compromised and sends spam, you will definitely notice it.

Nice tool. Doesn’t show any suspicious activity… :man_shrugging:

7

Problem is you were likely compromised before the two days of log files. :frowning:

1 Like
8

I had a problem with AT&T not accepting emails from MiaB and it was only dnsbl.info that was able to discover the blacklist I was on. The MX Lookup Tool at mxtoolbox.com did not find my IP address anywhere.

1 Like
9

Thanks for the suggestion. It’s not on any of those blacklists!

I reinstalled the server from backup and it seems my reputation with Google is restored! :smiley: