@vormirdieSinflut How do you conclude that we wouldn’t have remembered this thread?

Well, in other forums you would probably have received an indignant “Please use the search function first!” in your first post. thrown towards…

@vormirdieSinflut

Unfortunately, the search function in the community is not as good as Google. I mostly use Google myself and can find existing and solved problems in the community very quickly and easily.

You can’t compare Google’s calculators with the community search program and it will certainly take longer to find an optimal search function.

Hello

This could be my exact story! I’m currently experiencing exactly the same thing and, to be honest, I’m slowly turning in the red area!!! All PCs on the internet (3) were cleaned with anti-malware, the latest virus scanners and the latest MS Office packages.

Yesterday I got a new IP address and 5 minutes later it was blacklisted again on “Spamhaus”!? I call support once a week and they provide friendly help, but as I said, the whole thing only lasts 1 - 2 days! Now I can no longer send emails! What can I do? Do I actually have to change provider - I used to be very happy with Swisscom…

@DonPedro66 Every IP of Swisscom private connections is listed on Spamhaus as Dialup-Anschluss. Absolutely correct and to be expected. By the way, it’s exactly the same for all other providers, at least as far as private customer connections are concerned. And this has no negative impact on sending emails at all, as long as you do this (as has been the case for years) with the settings provided by the mail provider (outgoing port usually 465 or 587).

Since you have already cleaned several PCs and this has not helped, it would be good to know what more detailed information you have received from Swisscom regarding your problem. As you can see from this thread, it is often network-enabled devices such as webcams, weather stations and the like that trigger the (justified) ban. If you give us more information, we can help you better.

@DonPedro66

- Do you use any VPN service on your PCs?

- What kind of devices do you have on the internet?

Hello @DonPedro66

Any other ISP has to block you if abuse is detected on their Anschluss.

Here are a few thoughts on what else can block the Anschluss:

Do you perhaps use a Smart TV that is connected to the Internet?

Do you have a “free VPN program” installed? e.g. Halo would be a candidate

Do you have Wathsup installed on a Taplet? (If it doesn’t work officially, then it would be from an illegal installation source.)

Have you perhaps shared your Internet Anschluss with a neighbor?

Or your neighbor was visiting you and you gave him the WiFi key.

Do you have children, what do you what they do on your Anschluss.

Greetings Lorenz

Hello guys, I had the same problem from October 2020 to May 2021 that Swisscom kept blocking me, supposedly because of the Mirai virus. This was reported by Melani. I then spent around 4,000.00 on time and having all the devices reinstalled by an IT company. But nothing helped.
I then asked Melani directly for details. They were able to tell me which device was the culprit. It was DLink’s surveillance cameras. A message to DLink then triggered that I received a beta version of the firmware. I also turned off IPV6 on the router and set the firewall settings in the Swisscombox to strict. I also demanded that Swisscom install the always promised beta version of the firmware.
I also changed all of the default passwords for the smart TV devices. Unfortunately, I had absolutely no support from Swisscom and I had to do all the research and apply pressure myself. In the end I received 600.00 in compensation because of the activities. Actually ridiculous when you consider the busyness I had and Swisscom actually instructed me to reset the devices, even though that wasn’t the issue at all. But rather in the settings of the router and the firmware of the DLink cameras. The alleged error messages apparently fit the pattern of the Mirai virus because I was always blocked.
It is not acceptable that Swisscom does not offer more support or provide more concrete information.
I hope I could help you with that.

What does all this have to do with the firmware of the Internet box?

The Anschluss is blocked if the network (not the router) detects that the Anschluss is compromised. So far, Swisscom has not been able to say which device was responsible. You are also responsible for the clients you have at home.

The default firewall setting on the Internet boxes is now “Strict” in order to increase protection, but this can also lead to other problems for the customer. In addition, since FW 11.03.xx there is a new function that can identify devices with suspicious behavior. But not with 100% security and this function will definitely get better and better in the future.

The problem is that many “SmartHome” devices sold in stores are simple “dirty devices”. The manufacturers are only interested in sales and the issue of safety (especially in the long term) only plays a subordinate role. Also applies to premium manufacturers. That’s why Swisscom is investing in the topic of “detection” so that not all customers, like you, have to search for so long and helplessly.

If a device is now recognized by the Internet-Box as suspicious, it will be marked with a red beetle symbol in the Internet-Box menu. Then. Do you already have an idea where to look?

---

@vormirdieSinflut wrote:

[…] supposedly because of the Mirai virus. […] although that wasn’t the issue at all. But rather in the settings of the router and the firmware of the DLink cameras. The alleged error messages apparently fit the pattern of the Mirai virus because I was always blocked. […]

---

Ahem, no offense, but you clearly still haven’t figured out where this Mirai virus has settled.

No, I didn’t understand. Because even after resetting the cameras and removing them from the network, the WiFi internet connection was blocked. Or Melani’s reports lag so behind that you can never really understand which devices are responsible.
all very strange

---

@5018 wrote:

What does all this have to do with the firmware of the Internet box?

….

If a device is now recognized by the Internet-Box as suspicious, it will be marked with a red beetle symbol in the Internet-Box menu. Then. Do you already have an idea where to look?

---

Actually exactly that 😉

Many thanks for your response. I was told by the Swisscom hotline that, among other things, the sending problem had to do with Spamhaus’ blacklist.

Otherwise I don’t really have anything special on the internet… I could never be told what exactly the problem with the blocking is/was… I can send everything via webmail, via the mail app - no matter which one - only the inbox works.. .

@vormirdieSinflut From what you wrote there, these were not “alleged” error messages that “apparently fit into the Mirai virus scheme”, but rather you had a solid Mirai virus infection in your webcam’s operating system (yes , right: in the webcam). Apparently it’s embedded itself so deeply that even a simple reset didn’t remove it. Only the new firmware fixed the problem.

As far as the report from Melani (which, by the way, is now called NCSC), according to your posts, it was communicated fairly early on that it was about a Mirai infection. This would actually have made it 98% clear where to look. If the IT service provider you hire is just fishing in the dark and charging a lot of money for it, that’s annoying, but Swisscom can’t help it.

Anything can happen, but it’s not OK if you keep writing that Swisscom is somehow to blame. They just did their job well by protecting the rest of the network from the virus spreading further.

Hello Pogo1104, no, I don’t use a VPN, what I have is a dynamic IP with NOIP, but in the past it always worked perfectly… I have 3 PCs on the network and the cell phones and an iPad on the WLAN…

@DonPedro66 So what exactly is your problem? This thread is about complete blocking of internet connections due to virus activity. Then nothing works anymore and you get a message about the blocking when you access any website. But you only write about problems with sending emails. That would be something different.

As you write, access to webmail works (I assume you have a bluewin.ch address, right)?

If sending with the mail app on your Apple device no longer works, take a look at the instructions at: https://www.swisscom.ch/cram. That would be a known problem, but it has nothing to do with this thread. And not with Spamhaus either. Sometimes hotliners have pretty absurd ideas.