Why is there an email block against my IP address?

Blocks against IP addresses are actually fairly rare when it comes to normal
consumer internet connections, but they do happen.

One of the reasons that they’re rare is that they’re also somewhat error
prone, as you’ve seen.

We’ll look at what Hotmail (or any ISP that does this) might be thinking,
and what your alternatives are.

]]>

As you probably know, every computer is identified on its network with an IP, or Internet Protocol, address. In theory, then, by knowing the IP address of a computer you can block communications from that computer by blocking anything that comes from the IP address that it’s been assigned.

There are several problems with this approach.

The most common is that it really only works with computers that are connected directly to the internet. In many situations, from the simple router at home, to a more complex local network at corporations, school districts and others, a large number of computers will be connected to a local network that is connected to the internet through some other device. That device, typically a router, will have an IP address on the internet, but all the computers “behind it” will not; while they will have IP addresses on their local area network, those addresses will never appear on the internet. All internet traffic appears as if it came from the IP address assigned to the router.

Thus blocking that IP address – the only internet visible IP address, that of the router – will actually block all the computers on the local area network behind it.

You can typically tell if your computer is behind a router: your computer’s IP address will begin with 10., 172.16. through 172.31., or 192.168. These are considered “non-routable” addresses and can never appear on the internet, only on local area networks. In these cases, your internet IP address will actually be the IP address assigned to your router, and will be shared with all the other computers behind the router with you.

The other common problem is that IP addresses change.

“Dynamic” IP addresses are assigned to your computer or your router when you turn on your modem, dial up or otherwise make your network connection. They can even change while you are connected.

Dynamic IP addresses are in fact the most common for consumer internet services such as dialup, DSL, cable and others. While what are called “static” IP addresses – IP addresses that do not change – are available, they’re typically extra cost, and in all honesty not needed by most folks.

This affects you as the scenario plays out like this: Person A connects to the internet using the same Internet Service Provider or ISP that you do. They are assigned a dynamic IP address and start spamming. One or more of the recipients of that spam then say “enough is enough”, and block the IP address. Person A eventually goes away, disconnecting from the internet and the ISP, freeing up the IP address that they had been using for reuse.

You come along, connect to the internet, are randomly assigned that IP address that had been previously used by the spammer, and … you’re blocked. You’ve inherited that spammer’s reputation.

The third scenario is even a little worse: you actually are the spammer. Not intentionally, but by accident, perhaps.

In this scenario, your machine – or a machine behind the same router as your machine – has become infected with a “spam bot” virus. These bots are used by spammers to cause their email to be sent from machines around the network rather than a single easily blocked source. If your machine gets infected and starts sending out spam without your knowledge, your IP address can quickly become blocked.

And since “your IP” is actually your internet IP address shared with all of the machines that might be behind your router, if any of those machines become infected bots then a block on your IP address would affect all the machines.

You might be asking “if there are so many problems, why block IP addresses at all?” For one reason, email services are desperate to block spam – so desperate that the occasional “false positive” is considered an acceptable risk. For another reason, IP address blocking does work for certain classes of spammers: those that are sending from a single – often compromised – server that is connected directly to the internet. This later scenario used to be the most common by far, and the effectiveness of IP blocking to thwart them has lead to the rise of distributed bot nets that are so much more difficult to block.

So, what do you do with this happens to you?

I’d recommend the following:

• Perform an up-to-date malware scan to make sure that your machine is not infected with a bot. This won’t get your IP address un-blocked, but it will prevent you from continuing to contribute to a problem if you are infected.

• Reboot your router or other internet-connected device – sometimes, though not always, this will cause your ISP to assign you a new IP address. The longer you can leave it off the more likely it is that you’ll get a new IP address; overnight might be well worth a try.

• Wait. IP addresses do get taken off the block lists as well, though it can some times take a very long time.

• Send from a different source. This is a case where one of the free online services like Gmail or even Hotmail can make sense: create an account and use that account to send to your friends. Your friends email service will see your email coming from Hotmail or Gmail, not from your IP address.