Cisco antispam tool blocks thousands of emails following domain registration blunder

Spam messages
(Image credit: Shutterstock)

A blunder involving Cisco’s SpamCop anti-spam service resulted in thousands of emails being blocked after being mistakenly labeled as spam. The issue occurred after SpamCop allowed its domain to expire, resulting in mail servers that employed the service to automatically reject any outgoing messages.

As a result of the domain expiration, thousands of organizations and mail administrators all over the world found that their outgoing emails were listed as spam, blacklisted at bl.spamcop.net. 

Administrators were also confronted with the following, rather unhelpful, message when they reviewed their mail server logs: "The error on www.spamcop.net is: An error occurred while processing your request."

Once SpamCop’s domain expired, visiting spamcop.net resulted in a redirect to a domain parking service’s IP address. This meant that every time SpamCop checked for a valid DNS entry to see if an IP address has been associated with spam in the past, it returned a positive result – blocking the message.

Worryingly though, whoever re-registered the domain name again with the domain registrar only chose to do it for one year. Which means that the issue might come back to bite users in 2022.

Remember to renew

Cisco did act quickly to resolve the issue by renewing the expired domain. This should have fixed the problem for email administrators but some were still reporting issues. It seems that how quickly email services return to normal can vary significantly.

If organizations continue to receive error messages, it is possible that the problems are caused by cached DNS lookup results stored on local DNS servers. They could try deleting the cache, which should return functionality to the SpamCop service.

Allowing a domain to expire is an embarrassing reason for disruption to occur – and easily avoided. Businesses could set up a master spreadsheet of all their domain names and renewal dates or, where possible, pay for critical domains to renew automatically.

Via Bleeping Computer

Barclay Ballard

Barclay has been writing about technology for a decade, starting out as a freelancer with ITProPortal covering everything from London’s start-up scene to comparisons of the best cloud storage services.  After that, he spent some time as the managing editor of an online outlet focusing on cloud computing, furthering his interest in virtualization, Big Data, and the Internet of Things. 

Latest in Security
Isometric demonstrating multi-factor authentication using a mobile device.
NCSC gets influencers to sing the praises of 2FA
Sam Altman and OpenAI
OpenAI is upping its bug bounty rewards as security worries rise
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Dangerous new CoffeeLoader malware executes on your GPU to get past security tools
China
Notorious Chinese hackers FamousSparrow allegedly target US financial firms
A digital representation of a lock
NYU website defaced as hacker leaks info on a million students
NHS
NHS IT supplier hit with major fine following ransomware attack
Latest in News
cheap Nintendo Switch game deals sales
Nintendo didn't anticipate that Mario Kart 8 Deluxe was 'going to be the juggernaut' for the Nintendo Switch when it was ported to the console, according to former employees
Three angles of the Apple MacBook Air 15-inch M4 laptop above a desk
Apple MacBook Air 15-inch (M4) review roundup – should you buy Apple's new lightweight laptop?
Witchbrook
Witchbrook, the life-sim I've been waiting years for, finally has a release window and it's sooner than you think
Amazon Echo Smart Speaker
Amazon is experimenting with renaming Echo speakers to Alexa speakers, and it's about time
Shigeru Miyamoto presents Nintendo Today app
Nintendo Today smartphone app is out now on iOS and Android devices – and here's what it does
iPhone 13 mini
The iPhone mini won't be returning, according to rumors – and you think that's a mistake