Gmail: "mail sent from your IP address has been blocked."

Our system has detected an unusual 550-5.7.28 rate of unsolicited mail originating
from your IP address. To 550-5.7.28 protect our users from spam, mail sent
from your IP address has been 550-5.7.28 blocked. Please visit 550-5.7.28
https://support.google.com/mail/?p=UnsolicitedIPError to review our 550
5.7.28 Bulk Email Senders Guidelines. h16si13481148wml.155 - gsmtp

How can I look into this? Has my server been hacked? Does this mean I have to change the ip of my box?

First, read this page;) Add your site to postmaster.google.com.
Second, look in your mail.log file and verify how much mail is sent to google
the mail.log file is in /var/log/

I’m not sure, but doing this grep, will probably give you some idea how much mail is sent to google recently

grep “smtpd.*client.*google” /var/log/mail.log

Solve the problem, don’t change the ip address of the box.

other good check is: https://mxtoolbox.com

grep google /var/log/mail.log | wc -l
212

OK that cannot be a problem

First, read this page;) Add your site to postmaster.google.com.

Thank you. I now did that. I read that DKIM might be a problem too? Does mail-in-a-box use DKIM signing?

other good check is: https://mxtoolbox.com

I think Google is just being a bully at this point.

Verify with mxtoolbox if your ip, your miab domain or the sending domain is on a blacklist

I like to install and watch pflogsumm as it will show you unusual activity. So if a mailbox gets compromised and sends spam, you will definitely notice it.

I contacted the Gmail team through https://support.google.com/mail/troubleshooter/2696779

Hope they can fix the problem…

Verify with mxtoolbox if your ip, your miab domain or the sending domain is on a blacklist

I’m not blacklisted anywhere.

I like to install and watch pflogsumm as it will show you unusual activity. So if a mailbox gets compromised and sends spam, you will definitely notice it.

Nice tool. Doesn’t show any suspicious activity… :man_shrugging:

Problem is you were likely compromised before the two days of log files. :frowning:

1 Like

I had a problem with AT&T not accepting emails from MiaB and it was only dnsbl.info that was able to discover the blacklist I was on. The MX Lookup Tool at mxtoolbox.com did not find my IP address anywhere.

Thanks for the suggestion. It’s not on any of those blacklists!

I reinstalled the server from backup and it seems my reputation with Google is restored! :smiley: