Bonjour, j'utilise le client messagerie Thunderbird et j'ai une adresse mail à la Poste. Depuis quelques jours lorsque je souhaite envoyer un mail cela m'est impossible et j'obtiens un message me disant que l'envoi est bloqué par spamhaus. Je suis allé sur le site spamhaus.org, j'y ai entré l'adresse IP de ma Box et j'ai reçu ce courriel qui me dit, si je comprends bien, qu'il faut que j'établisse une règle sur le port 25 pour qu'il ne soit utilisé que par le serveur SMTP de la Poste. Par ailleurs je suis assez étonné parce que dans le paramétrage de Thunderbird c'est le port 465 qu'utilise SMTP la Poste.
Que me conseillez vous de faire ?
Merci et bonne journée.
"Thank you for contacting Spamhaus CSS Removals,
Please use https://translate.google.com/ for language, if needed.
A device (server, computer, mobile phone, etc), website, or an app on a device that is using 37.65.158.189 appears to be infected, insecure or compromised. It is making SMTP connections on port 25 with apparently forged values.
(IP, UTC timestamp, HELO value)
37.65.158.189 2023-09-29 07:20:00 189.158.65.37.rev.sfr.net
The first detection was (UTC) 2022-10-14 11:10:00
The last detection was (UTC) 2023-09-29 07:25:00
If this is a shared server, please call your hosting company or ISP!
This is usually caused by a spambot or open proxy on someone's personal device that is connected to the network, usually a mobile phone. Here's an example: https://www.spamhaus.com/resource-cente … -go-rogue/
To stop the abuse immediately, close outbound port 25 on the router or firewall and restrict outbound port 25 access to known email servers. NOTE: this will only prevent the abusive connections from leaving your network. If the problem is (for example) an infected mobile phone, when it moves to another insecure network, it will resume its activity without restriction.
To find and eliminate the source of the problem, please see the our FAQs:
WiFi and Home/Small Office Networks:
https://www.spamhaus.org/faq/section/Hacked...%20Here's%20help#536
General Help
https://www.spamhaus.org/faq/section/Hacked...%20Here's%20help
Closing port 25:
https://www.spamhaus.org/faq/section/Hacked...%20Here's%20help#537
Some general pointers that may be helpful:
If 37.65.158.189 is a NAT gateway, firewall or router: the infected devices are usually devices behind the router, but in some cases the problem can also be the router itself. Please consult the documentation or manufacturer of your router or firewall to make sure its software is up to date, and how to be sure that the device is properly secured.
* Programs like Windows Defender, Windows Malicious Software Removal Tool (MSRT), Malwarebytes, Norton Power Eraser, CCleaner and/or McAfee Stinger can help. There is also a version of Malwarebytes for Mac/OSX. These tools are free of charge!
* All operating systems: Check tool-bars, extensions and plug-ins on each browser for anything you don't recognize. Look for for "free" VPNs or other heavily-monetized apps.
* Calling your ISP or taking your suspect machine(s) to a professional tech support service might also be useful.
Please secure all devices using 37.65.158.189, and disable outbound port 25 if possible.
CSS listings expire a few days after last detection. You can always open a ticket (or update an existing one) to inform us when and how the situation was been secured.
Regards,
R e "
