Hotmail blacklist and rDNS questions

blacklistemailreverse-dnsspf

My company has recently purchased a VPS for email and webhosting. I am not an expert on email authentication but here is my story.

After the VPS was purchased we started receiving bouncebacks with the error message from hotmail.com:

550 SC-001 (COL0-MC1-F10)
Unfortunately, messages from 205.234.204.81 weren't sent. Please contact
your Internet service provider since part of their network is on our block
list. You can also refer your provider to
http://mail.live.com/mail/troubleshooting.aspx#errors

After doing research on the issue I have tried to join hotmail Sender ID program. I also added an SPF to my domain (not sure if it is correct)

v=spf1 a mx ip4:205.234.20x.xx a:xxserver.com mx:xxserver.com ?all

After petitioning the Hotmail blacklist by filling out their form, I am still on their blacklist. Many of our customers are Hotmail accounts and this is becoming a big issue for us. I am not sure if my rDNS is correct, the SPF record or what is the problem.

I am aware that I may be leaving out some information, I am new to the email server administration so I will post what I can to make this easier. Thank you!

I have seen other threads on here and tried to follow their instruction to no avail.. and I did not want to resurrect an old thread.

Best Answer

It's not your IP's reputation. Senderscore get some of their reputation information from Hotmail and they think your IP address is clean: https://www.senderscore.org/lookup.php?lookup=205.234.204.81

SenderBase think you're clean too: http://www.senderbase.org/senderbase_queries/detailip?search_string=205.234.204.81

The error message in your question says:

part of their network is on our block list.

So it's not your IP address but too many of the other IP addresses your hosting provider owns that are the problem. (Assuming that the error message from Hotmail is accurate.)

Talk to your hosting provider. If they can't fix their IP address space reputation in a reasonable time frame, either get a new hosting provider, a third-party mail relay or use your hosting provider's mail relay (if it has a reasonable reputation).

As for reverse DNS, the forward and reverse do match each other. I don't know what your HELO looks like but as long as it matches the forward DNS it should be fine.

With SPF, -all is the best choice. A lot of people choose ~all thinking that if they screw up, at least the messages will still be delivered but this is erroneous thinking. With -all you get a bounce to let you know that your SPF is not configured properly. With ~all your emails get silently put in the recipient's junk folder.