Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps - Status | Demo | Docs | Install
  1. Cloudron Forum
  2. Support
  3. SpamHaus false positive on Ubuntu 24.04 + latest Cloudron

SpamHaus false positive on Ubuntu 24.04 + latest Cloudron

Scheduled Pinned Locked Moved Solved Support
mailspamhaus
6 Posts 2 Posters 42 Views 2 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • archosA Offline
    archosA Offline
    archos
    translator
    wrote last edited by joseph
    #1

    Hi,
    Cloudron UI reports my IP as listed on SpamHaus, but check.spamhaus.org shows no issues for my hostname.
    If I’m not mistaken, this was already addressed in an older release. I’m on Ubuntu 24.04 with the latest version of Cloudron.
    The impact is real – some mail servers are rejecting outbound mail from my server with error 554 5.7.1. MX, DKIM, SPF, DMARC and PTR records are all green.
    Is anyone else experiencing this on Ubuntu 24.04 + latest Cloudron? Thanks.

    1 Reply Last reply
    1
    • J Offline
      J Offline
      joseph
      Staff
      wrote last edited by
      #2

      Is the IPv4 check failing or the IPv6 check?

      1 Reply Last reply
      2
      • archosA Offline
        archosA Offline
        archos
        translator
        wrote last edited by
        #3

        Both today – sometimes it’s just one, sometimes both.​​​​​​​​​​​​​​​​

        1 Reply Last reply
        0
        • archosA Offline
          archosA Offline
          archos
          translator
          wrote last edited by
          #4

          After further investigation it seems that this is not a Cloudron bug, but an actual listing of the server IP on a blacklist.

          I checked the mail server logs on the Cloudron host in:

          /home/yellowtent/platformdata/logs/mail/app.log
          /home/yellowtent/platformdata/logs/mail/app.log.1

          I do not see any signs of a compromised server or bulk spam activity. The logs mainly contain normal system notifications and failed SMTP authentication attempts from random internet bots.

          At the moment I do not see any evidence that the server is compromised or that it is sending spam.

          Is it possible that I am looking in the wrong place? Are there any other Cloudron logs related to outgoing mail or postfix that I should check?

          1 Reply Last reply
          0
          • J Offline
            J Offline
            joseph
            Staff
            wrote last edited by
            #5

            @archos check the DNSBL response code. Each response code has a meaning. See https://www.spamhaus.org/faqs/dnsbl-usage/#200 inside search for "Return codes". I cannot see how to deep link or even select the question in that page.

            1 Reply Last reply
            0
            • archosA Offline
              archosA Offline
              archos
              translator
              wrote last edited by
              #6

              Small update from my side.

              I contacted Spamhaus through their ticket system and after communicating with them it seems everything is now resolved and the IP has been removed from the blacklist. Emails are working normally again.

              Sorry for the false alarm and thank you for your help and responses. I did notice that occasionally I still see the error that was present in the previous version, so I will keep

              1 Reply Last reply
              2
              • J joseph has marked this topic as solved

              Hello! It looks like you're interested in this conversation, but you don't have an account yet.

              Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

              With your input, this post could be even better 💗

              Register Login
              Reply
              • Reply as topic
              Log in to reply
              • Oldest to Newest
              • Newest to Oldest
              • Most Votes


              • Login

              • Don't have an account? Register

              • Login or register to search.
              • First post
                Last post
              0
              • Categories
              • Recent
              • Tags
              • Popular
              • Bookmarks
              • Search