Why is Microsoft blocking my emails?
My emails are bouncing back, and I don't know why. I get the below message. What does it mean?
Please contact your Internet service provider since part of their network is on our block list
There are quite a few records that you will need to set up for a mail server. This will help validate your mail server to receiving mail servers. This Community site post from a couple of years ago is still rather relevant. It's a through explanation of how to set a mail server's records up.
I also recommend checking out the below resources for more information.
You may need to reach out to Support, if you find that you are still having issues sending email and it's only blocked by Hotmail/Outlook. We will be able to assist you with requesting a delisting from Microsoft. We will just need you to supply us with some information.
Please provide us with the following in your Support ticket:
- The full SMTP 5xx error message that you would have received when you were notified of this block from Microsoft. It should look something like this:
host mx3.hotmail.com[$MICROSOFTIPADDRESS] said: 550 SC-001 (COL004-MC3F10) Unfortunately, messages from $YOURIPADDRESS weren't sent. Please contact your Internet service provider since part of their network is on our block list. You can also refer your provider to http://mail.live.com/mail/troubleshooting.aspx#errors. (in reply to MAIL FROM command)
The domain that you were attempting to send mail from, and the domain that you were attempting to send to.
Microsoft will not accept mail from domains without a valid SPF record, and you are likely to have deliverability issues without valid reverse DNS set up. We can send a delisting request to Microsoft for you once we have that information and have ensured that your SPF and rDNS are set up correctly.
I hope this information helps!
They dont send any error anymore, they just drop the mail.
I use SPF/DKIM/DMARC. rDNS is set too.
@Tntdruid could you elaborate a bit more on that? We've very recently received reports of customers receiving such messages from Microsoft.
Made a email@example.com account to test if mail gets there, they did not. Dont see any errors from outlook.com.
I have the same problem. I am receiving the following message.
SMTP: 550 5.7.1 Unfortunately, messages from [x.x.x.x] weren't sent. Please contact your Internet service provider since part of their network is on our block list (S3140). You can also refer your provider to http://mail.live.com/mail/troubleshooting.aspx#errors. [MW2NAM10FT006.eop-nam10.prod.protection.outlook.com]
The settings of SPF, rDNS, tested on the site mxtoolbox(https://mxtoolbox.com/). Would you help me.
- Did you make sure that the IP address 'x.x.x.x' is not on some internet blocklist (Zen) or spammer list (Spamhaus)? Try a some different domain/IP reputation-checking tools (https://www.ipvoid.com/domain-reputation-check/, https://www.bulkblacklist.com, https://www.barracudacentral.org/lookups/lookup-reputation, etc).
- Do you have DKIM & DMARC set up? Microsoft may require them now…the last docs I saw say that DMARC is "recommended"…
Unfortunately, without mind-reading capability, it's going to be difficult to figure out what, exactly, is wrong without a lot of trial and error. Microsoft is very inarticulate/capricious/litigious about their internal IT policies…and even less-articulate about their policies regarding customer-facing services.
They are also not immune to the good, ol'-fashioned screw-up. You know…the contractor in Bangalore changed something in the world-wide Exchange network s/he shouldn't have…
I totally agree with @stevewi when it comes to the consumer-focused Outlook.com (previously Hotmail and related ilk.)
However I have been pleasantly surprised with sending mail to Office 365 users (the “cloudy” version of Exchange.) I’ve had several IPs from Linode that were only blacklisted by 365, but they bounced with a clear message and a web link that prompted me to submit the IP.
Within a day or two the block was removed and never had another issue with those IPs.
I had already checked how I mentioned in the previous message with mxtoolbox he searches in several RBL. I also tested using the websites you mentioned, I have dmarc dkim and spf and rdns I am sending and receiving to other domains like gmail, etc. less for hotmail. I sent it from another Linode server that is in the same region(Atlanta) and it worked.
Unfortunately, without mind-reading capability, it's going to be difficult to figure out what, exactly, is wrong without a lot of trial and error.
Since you have access to an email server that works, I would do one of two things:
- use that server for your emails to Microsoft domains (easier); or
- figure out how your mail-server configuration is different than the one that is known to work (harder).
However, the situation you describe with the two servers in the same datacenter is not unusual in my experience. Are the two servers in the same subnet? Does mail from the two servers use the exactly the same SMTP "route" from source to destination?
Microsoft undoubtedly has developed proprietary sources of information that they use in making rejection decisions. Because of this, and their understandable reluctance to talk about internal IT security policies, you have no way of knowing exactly what the reason for rejection was…and Microsoft is never going to tell you either (you could always try asking but I wouldn't get overly hopeful about a response…or even an acknowledgement).
While mxtoolbox is a good toolset, the list of things it checks is not exhaustive. Because Microsoft uses proprietary sources of information in their decision-making process(es), mxtoolbox can never check those.
I suggest you get cracking on that trial-and-error process…you're going to be at it awhile (keep good notes). Don't be surprised when the thing you discover solves your problem stops working after awhile for no reason. Ditto for your "known-working" configuration exemplar. Unfortunately, Microsoft is flying this plane and, like in commercial airliners, there are locked, bullet-proof doors without windows between you and the pilot.
Same thing has just started happening with my server as well. It was working fine 24 hours ago, so this is very recent.
At first I thought I had messed up my postfix setup (I've been rejecting spam emails sent to (not from) my server, but double checking has shown that it's all fine.
I've also used mxtoolbox and I'm not blacklisted (except via Hotmail/Outlook).
Same thing has just started happening with my server as well. It was working fine 24 hours ago, so this is very recent.
Welcome back, my friend, to the show that never ends…
Back in my working days, I worked on a project that was a partnership with M$…partnership agreement & everything. M$ stole our idea(s) and marketed their own product…completely cutting us out. Needless to say, we abandoned our efforts. Fortunately, most of our IP was patented so M$ had to eventually pay us for a license to use it so we were able to recover some of the cost of this "relationship" (my former employer was particularly ferocious about this).
When we asked the M$ "VP of whatever Marketing" who was heading up their side of things what had gone wrong with the relationship and why they had done what they'd done, he said (and I'll never forget this): "You made a fatal mistake…you trusted us."
Aaaand now I'm getting it too.
Unfortunately, messages from [104.237.131.xxx] weren't sent. Please contact your Internet service provider since part of their network is on our block list (S3140). You can also refer your provider to http://mail.live.com/mail/troubleshooting.aspx#errors.
I've added the server IP to the MS tool, but it's listed as "Blocked due to user complaints or other evidence of spamming". Unless I've completely missed something there is not and has never been any mail from my domain that I didn't type individually. I don't conduct mailing campaigns, and I don't sell anything, it's just a personal domain and has been for the better part of a decade. I've got DKIM/SPF/DMARC configured, and a PTR record for the IP, and I've been able to send mail to outlook.com and hotmail.com users (as well as friends at higher ed and other commercial domains) for years.
I did reply when I got the "not qualified for mitigation" message, and received this in response:
My name is xxx and I work with the Outlook.com Deliverability Support Team.
We will be looking into this issue along with the Escalations Team. We understand the urgency of this issue and will provide an update as soon as this is available. Rest assured that this ticket is being tracked and we will get back to you as soon as we have more information to offer.
Thank you for your patience.
That was on Saturday, so I'll see where it goes. Just happened to find this thread while checking to see if anyone else was experiencing it.
@not_that_dave yes, this started happening to me about 2 or 3 weeks ago as well. No explanation given, not very useful data provided by Microsoft in their dashboard thing, and my mail server has SPF, DKIM, DMARC… very frustrating. I too have got the 'not qualified for mitigation' twice now.
Did they end up delisting you after you followed up on their 'not qualified for mitigation' message?
Same problem here, it started a couple of weeks ago. Configuration is fine (checked on mxtoolbox) but received "not qualified for mitigation". I've even tried to switch the mail server to another IP, but with no results. Now I will try to contact linode support as described in the first reply.
It seems that microsoft blocks your IP even if it's not sending spam, but there is another linode in your subnet (with an IP near yours) that is sending it. It seems to me that this practice should be against some internet rules and/or email rules, couldn't linode complain with some authority?
It seems to me that this practice should be against some internet rules and/or email rules, couldn't linode complain with some authority?
Policies governing email arriving at a particular email server (which may or may not be different from a domain), are under the control of the server owner/operator…not "the internet." The only rules that matter are the rules the server owner/operator wants to set up and enforce.
I own/operate my own email server. If you (the sender) didn't have an SPF record or didn't have rDNS set up or used an invalid HELO hostname, my server would reject your messages too. I don't need permission of "the internet" to do any of this. Neither do you. "The internet" ends once the packets cross the boundary into M$s private networks (where M$s email servers undoubtedly live).
M$ has the right to protect it's private property with whatever policies they want. You/me/Linode/USGovt/IETF/whoever can complain about it until the sky turns green. The only complaints that matter are from M$s internal policy makers.
Same happening now. Have all above settings done right and getting blocked sending to outlook/live/hotmail addresses. On their Junk Reporting and snds lists too - never any spam reported.
Support says nothing we can do - they asked for remediation and Microsoft refused. Bounce still says:
XXXXX@live.com: host live-com.olc.protection.outlook.com[MY IP]
said: 550 5.7.1 Unfortunately, messages from [MY IP] weren't sent.
Please contact your Internet service provider since part of their network
is on our block list (S3140). You can also refer your provider to
[DM6NAM10FT043.eop-nam10.prod.protection.outlook.com] (in reply to MAIL
Is there any hope, or best to move email off linode for good?
I ran https://talosintelligence.com/reputation_center/lookup?search=MY IP and found some IP's with Poor reputation in my IP block on Linode. Have reported this with my support request and no response on that so far.
Please run a report and see if this is the problem. Maybe Linode is letting too many bad players send spam and is hurting us all.
@lukydesigns I've found your ticket, and it looks like you've received the most recent response from us. Let us know if you have any other questions!
I'm having similar issues with Microsoft. This is pure extortion.
SPF, DKIM, DMARC all set. Our IP isn't listed on any block list.
I've opened ticked but so far received nothing that could help us out. I've also opened ticked with Microsoft. Nothing so far.
My coworkers are getting pissed. We can't work with 5 of our partners anymore.
What to do?
css-one-microsoft-com.mail.protection.outlook.com[126.96.36.199] said: 550
5.7.511 Access denied, banned sender[176.58.X.X]. To request removal
from this list please forward this message to
[email protected] For more information please go to
[BL2NAM06FT004.Eop-nam06.prod.protection.outlook.com] (in reply to RCPT TO