Black listed, Really? WTF

One of those days today!

I was asked to take a look at a SBS2011 server by someone today as emails were not being sent but were being received.

So I set about sorting through the list of errors in the event log, as per normal there was a to be expected reboot right in the middle of everything!
It kind of reminded me of when I got contacted by my old employer, after they had made me redundant, to look at a problem that stopped their Service Management System working. The idiots that they brought in to oust me had applied all their skill (all 3 of them) to fix the problem and come up with 4 reboots! Yes 4 reboots! Needless to say that after 4 it still wasn`t working. So a quick look through the logs I found the issue and reported back to them.

Anyway, I looked through all the logs on the server, but couldn`t see anything, so I checked out the send connector and see that there was a huge old queue reporting DNS lookup failures.
So I checked that the Smart Host was in DNS. I then checked that I could connect to it on port 25, which I could. I tried a DNS Reset and Flush just to be safe, but it didn`t work.

I disabled the Smart Host connector, created a new send connector and set it up to send via DNS, and the emails left the queue.

I then reported back as to what I had done and asked them to check out to see if they had paid the bill for the Smart Host. Later that day I got a call to say that it was a fault with the Smart Host, apparently the company that provided the Smart Host service had one of their internal desktop machines infected with a virus by an employee and it has spammed out a load of crap! Jesus! Seriously?

I was somewhat surprised that
A) They got infected with a virus!
B) They were sending emails out on a connection that was used as a smart host by a customer (and most probably more than one)!
C) They told a customer exactly what had happened!

A quick check showed that they were on some black lists for sending out spam.
I will leave that a few days before I check back to see if they have been removed…