EMAIL SENT TO SUPPORT . . . . .

Support,

QB uses sendgrid.com for their invoice (and probably other) outbound email sends.  So the actual send comes from three IP addresses belonging to sendgrid.com, 167.89.82.160, 167.89.58.229 and 167.89.58.138.

All three of those IP addresses are listed in spamcop.com’s blacklist.  This blacklist is used by various email servers to decide if an email will be delivered or blocked. 

Consequently, when an invoice is sent to an email address whose server uses spamcop.com for blacklist testing, the email is blocked.  Conversely, when the email server uses a different spam checking source (or none) the email is delivered.

Neither Technology At Work or QB controls how the destination server check for spam.  And the end user has no control as well.

The only solution is to delist the three IP addresses from spamcop’s list, or move to new, clean IP addresses.

Delisting can only be initiated by sendgrid, it is their system that actually sends the email.  Or they can change IP addresses (but that may create another set of problems with email reputation).

No amount of changing emails in QB will fix the problem.

To confirm this, go to spamcop.com and check the three IP addresses.

Then contact sendgrid.com (who you pay every month) and have them fix this.  You might also remind them there are ways to routinely and automatically check for blacklisting and they (and QB) should really do that to avoid this in the future.

I can be reached at ###-###-#### and ###@##########.com

Thanks,

What kind of a solution is this?  How many small business do you think have an IT on payroll?

How about you get your ip’s unblocked and provide the service we pay for.

I received this same response to my question.  The other suggestion I received was send as a pdf.  
1. How is customer supposed to pay from the pdf?  

2. Invoicing is the main reason I use qbo.  If you cant fix this then why stay a customer?

Ive had some customers report that they have not received an invoice since end of February.  I am a small business with 2 employees.  I dont have the IT knowledge or dedicated staff to take care of this.  Hours spent on the phone with intuit running around in circles.  I also dont believe its just a small group this is affecting.  

aol.com and comcast.net are the worst offenders for spam blocking my invoices.

Where is the solution for the QB users SENDING out invoices?  We are paying customers whose business (and health for that matter) is being impacted by invoices not being received.

When is the madness going to end?  You've had intelligent suggestions on how to solve, yet the same answers are being regurgitated.  

And reach out to tier 2?  I was on the phone for 2 1/2 hours and they would not speak directly to me.  The entire conversation was through a first-level tech.  

Fix this mess...

This is not a viable solution. Please reach out to SendGrid and notify them that they have IPs that are flagged on SpamCop. We should not have to blanket allow all emails from those IPs, it just opens our systems to allowing other malicious emails thru. 

@ChristineJoieR the blacklisted IPs are NOT on the list in the article
I said this in my first posting, and this hasn't changed.

The 3 SendGrid IPs are not in that KB article.

Thank you!!!  I was just about to reply and add that to the discussion.

For Quickbooks records, here are all the IPs in the article you keep asking us to allow. Nowhere in this list are the IPs that are being blacklisted. I would be more OK with adding the IPs if they were yours, but since it is a 3rd party emailing service it is not a good idea, it would be like doing a blanket allow for all gmail senders. 

• 69.169.238.234
• 69.169.238.235
• 168.245.76.26
• 168.245.70.213
• 168.245.123.49
• 168.245.118.60
• 198.37.158.59
• 199.16.139.16
• 199.16.139.17
• 199.16.139.18
• 199.16.139.20
• 199.16.139.21
• 199.16.139.22
• 199.16.139.23
• 199.16.139.24
• 199.16.139.25
• 199.16.139.26
• 199.16.139.27
• 206.108.40.7
• 206.108.40.8
• 206.108.40.9
• 206.108.40.10
• 206.108.40.11
• 206.108.40.12
• 206.108.40.13
• 206.108.40.14
• 206.108.40.15
• 206.108.40.16
• 206.108.40.17
• 206.108.40.18
• 206.108.40.28
• 206.108.40.89
• 206.108.40.90
• 206.108.40.92
• 206.108.40.92
• 206.154.105.172
• 206.154.105.173
• 206.154.105.174
• 206.154.105.175
• 206.154.105.176
• 206.154.105.177
• 206.154.105.178
• 206.154.105.179

@ChristineJoieR I am starting to think that you guys are the ones who need to contact an IT Expert, as you clearly have no one there that is. Surely it can not be that hard to understand the issue. We can add IPs to our Whitelists as much as we like,  but that is not going to help OUR CUSTOMERS who are the ones that will still not receive the email.

I am currently looking at other providers who know what they are doing, unfortunately this will be our only fix. Its just unfortunate that the problem is not effecting most of your customer base, as the only way you might care, was if you lost most of YOUR customers.

I have opened a ticket qith sendgrid, you can thank me later.

Hello all. I’m Ami, one of the Moderators here in the QuickBooks Community. I want to thank everyone that participated in this conversation with more information about outbound emails being blocked/blacklisted.

I've escalated this to our engineering team for further investigation and will return to this thread with updates as I have them available.

Thank you to everyone for your diligence on this. We’ll do everything we can to find a swift resolution and make sure your invoices and other outbound emails are delivered reliably.

@Archie_B From the start of the thread and my original post. I am not a customer, and would be unable to open a ticket. We are a recipient of a large number of Quickbooks customers, various vendors, suppliers, etc. The Intuit/Quickbooks Sendgrid IPs are the root of the problem as others have mentioned. And don't you dare send me the KB article with the IPs again, you'd be the 3rd or 4th person at this point, because the 3 IPs on the blocklist are not in that KB article.

Thanks @Ami_D I appreciate the response. However, I've heard this story before from @QBCares on Twitter after receiving a private message from them on the matter. I've never heard anything back. I feel there's plenty of information in this thread at this point to resolve the issue. So I'm hoping either engineering can reach out to the community for testing, or if you can keep us updated in the community on the status, that would go a long way in knowing that the issue was at least top of mind.

As I mentioned to @QBCares I'd be more than happy to provide any necessary information from our side, and test if needed. Additionally, if these 3 IP addresses are valid IPs for QuickBooks invoicing, they really need to update the KB article referenced throughout this thread and in my original post. While it shouldn't be necessary that we add IP addresses to an allow list, I want it documented properly if that's the route we must go. This is obviously not a solution to most as you've seen however.

I have opened a ticket qith sendgrid, you can thank me later.

Ami_D if you really want to impress us ...

1. Fix this FAST and provide constant updates

2. Give us 3 months added to our accountd

Just heard from Jimi at SendGrid.  I sent them additional details.  More when it happens.

And no feedback from the folks at QuickBS.  HINT:  Your customer Service is not.  We are not asking for anything special, we just want the product to perform as advertised.  Please let us know of that is asking too much.

Name Date Time Message
Drew 6/2/2022 3:15 PM Invoices on spam list.
Assistant 6/2/2022 3:15 PM
Hello there! You are connected to our on-demand team who will answer any of your questions about
QuickBooks.
Assistant 6/2/2022 3:15 PM -
Assistant 6/2/2022 3:15 PM Aela Mille has joined the chat
Drew 6/2/2022 3:15 PM Hello Aela
Aela Mille 6/2/2022 3:16 PM
Thank you for contacting Intuit QuickBooks Online Chat Support. This is Aela. May I reconfirm your first and last
name?
Drew 6/2/2022 3:16 PM Drew 
Aela Mille 6/2/2022 3:16 PM Hi there :)
Drew 6/2/2022 3:16 PM Hello
Aela Mille 6/2/2022 3:16 PM I appreciate you waiting on the que and thanks for letting me know your concern on the first chat.<br><br><br>
Aela Mille 6/2/2022 3:16 PM Can you tell me more about your concern for today, Drew?
Drew 6/2/2022 3:16 PM
JunkMail rejected - o2.e.notification.intuit.com [167.89.58.229]:6752 is in an RBL: Blocked - see
https://www.spamcop.net/bl.s
Drew 6/2/2022 3:17 PM Yall need to contact spam cop or I think you use sendgrid.com to send the emails.
Aela Mille 6/2/2022 3:17 PM Have you contacted your IT about this concern?
Drew 6/2/2022 3:17 PM No, I am IT.
Drew 6/2/2022 3:18 PM Your ip addresses are blacklisted by a reputable blacklist. No one can get it cleaned up but you.
Drew 6/2/2022 3:18 PM
unkMail rejected - o1.e.notification.intuit.com [167.89.58.138]:38356 is in an RBL: Blocked - see
https://www.spamcop.net/bl.shtml?167.89.58.138
Drew 6/2/2022 3:19 PM please forward to your it so they can take care of the issue.
Aela Mille 6/2/2022 3:19 PM I will be needing to give you the link of the correct person you should contact, sounds good?
Aela Mille 6/2/2022 3:20 PM also for that May I have the Email or Company ID and Business Name please?
Drew 6/2/2022 3:20 PM not really, I am busy. I do this exact thing for my customers all the time.
Drew 6/2/2022 3:20 PM
https://quickbooks.intuit.com/learn-support/en-us/other-questions/intuit-ips-found-in-spamcop-blocki...
vendors/00/1066289/highlight/true/page/2
Drew 6/2/2022 3:20 PM Here is a forum on your website talking about the issue, it's effecting many people.
Drew 6/2/2022 3:21 PM

Aela Mille 6/2/2022 3:22 PM Kindly go here: https://help.developer.intuit.com/s/
Aela Mille 6/2/2022 3:23 PM As much as I want to help you with this, I am not trained for this one, this is out of my scope.
Aela Mille 6/2/2022 3:23 PM
Thank you for contacting Intuit QuickBooks Online Support. Stay safe. This is Aela your Intuit QuickBooks Online
Support.
Assistant 6/2/2022 3:23 PM Aela Mille has left the chat
Drew 6/2/2022 3:23 PM
Ok, thank you. Please forward the rejection notice to whoever deals with email delivery at your company. There is
nothing for me to do.
Assistant 6/2/2022 3:24 PM This chat session has expired. Please start a new chat session
Assistant 6/2/2022 3:24 PM Chat has ended!

Now that is funny, in a very sad way but funny none the less ;)

on a positive note i have directly requested delisting from spamcop, keep your fingers crossed.

QuickBS, are you paying attention?  Do you have any clue why your customers are so totally upset?  Any clue at all?  The good news though is those customers will eventually stop bothering you, after changing accounting software.

Hi All! 

Late to the conversation here... Has there been any movement on this issue? I am both a QBO user and small scale hosting provider, and I am seeing that WHM/cPanel keeps blocking the QBO emails based on the Spamcop issues. It feels like an unacceptable issue to let lapse on Intuit's part and is highly frustrating. 

From the QBO interface side, they show as bounce errors in my account. 

Curious if anyone has had any luck with a technical conversation. 

Thanks for your persistence @julezmbi. 

R. 

This just in from Richard at spamcop.....

"This is a shared IP belonging to Intuit, which has been sending spam to
our traps and/or users. We have seen a large increase in spam from Zoom
IP space, causing more of their IP addresses to be listed. Intuit has a
bug in their systems that allows spammers to exploit and send large
volumes of spam through their servers. Until Intuit fixes this exploit
so they stop sending large volumes of spam to our traps their IP
addresses will be subject to listing just like any other spam source.

You will have to discuss the problem with Intuit and perhaps ask to be
moved to an IP that doesn't send spam."

QuickBS?  Are you listening?  You can thank me later.

PS: I just emailed the president of Intuit (yes really) inviting him to view this thread.

This just in from spamcop support....

"I'll tell you what the issue is.  If it was just run of the mill
advertising spam we might throw a little less weight at it so it backs
off earlier.  But, this is completely different and as you suggest,
Intuit seems completely oblivious to it.

Scammers have figured out a way to send invoices out saying you've been
charged for tech support, Geek Squad, anti-virus, etc. The invoices
include a phone number to call which happens to be the same tech support
scam centers calling us everyday trying to defraud us out of money.

These seem to be more realistic because you actually have something in
front of you with official logos and other information. We view these as
high risk of success, so hit them hard.

Here's a sample of a 'Paypal' one.  Click 'view entire message'. Note
the phone number shows up on many fraud watch sites. We're seeing tens
of thousands of these every day."

QuickBS, are you out there?

Thank you @T3chNoid for providing the correspondence with Spamcop. I've shared these messages with the investigating team and have reached out this morning for an update on the investigation. I'll update this thread as soon as I have more to share. 

Thank you all!

This reply is from spamcop....

"This IP is listed because it has been sending spam or malware to our traps.  The likely cause is a virus/bot infected computer on your network or an account that has had the password information compromised.
Listings and delistings are automated.

Once there has been no new spam for 24 hours, the IP will automatically delist.
If you are not an administrator of this server or network, you should forward your complaint to the administrator or host.

Sample:

Received: from o2.e.notification.intuit.com (HELO o2.e.notification.intuit.com) (167.89.58.229)
  by [trap servername] (qpsmtpd/0.94) with ESMTP; Wed, 01 Jun 2022 22:xx:xx +0000
Date: Wed, 01 Jun 2022 22:xx:xx +0000 (UTC)
From:
=?utf-8?q?=CE=9D=CE=BF=D0=B3t=CE=BFn_=D0=85=CE=BFftw=D0=B0=D0=B3=D0=B5_?=
=?utf-8?q?=D0=85=D0=B5=D0=B3=CE=BD=D1=96=D1=81=D0=B5?=
<x@x>
Subject: Invoice N27528315 from =?UTF-8?B?zp3Ov9CzdM6/biDQhc6/ZnR30LDQs9C1?=
  =?UTF-8?B?INCF0LXQs8690ZbRgdC1?=

Regards
Nancy"

QuickBS, are you out there?

Thank you Ami.

I am surprised that sendgrid has not shut down the three related IP addresses.  If one of mine was spamming it would have been killed.

Please pass on that this is urgent and deserves rapid attention.