This article applies to:
- MailMarshal Cloud
Problem:
- Outbound mail refused due to listing on UCEPROTECT (L2 or L3)
Information:
From time to time individual MailMarshal Cloud node IP addresses are included in the UCEPROTECT level 2 or level 3 "spam database".
This can cause mail sent through these nodes to be refused by external recipients.
Why was the IP address listed?
Inclusion in these databases does not mean that the MailMarshal Cloud servers are spam sources.
The policy of this provider is to block entire networks based on reports of activity from some included addresses. This policy can lead to significant over-listing.
- For example recently a block of 525,000 addresses assigned to Microsoft was listed due to a few hundred reports of unwanted activity over a 7 day period.
Can the IP address be de-listed?
Listings are updated automatically and rarely remain active for more than a week.
Any other action would require intervention by the assigned owner of the network.
Because Trustwave uses Microsoft networks, Trustwave cannot request a de-listing.
Trustwave does monitor these listings.
Recommended customer action
For customers affected by this issue, the recommended action is to contact the recipient using another method, and advise them to allow connections from the affected addresses.
Trustwave MailMarshal Cloud KB article Q21225
Last Modified: October 31, 2024