Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

14
votes
2answers
844 views

What are the best methods for catching snowshoe spam?

I'm using Smartermail for my small mailserver. We've been having a problem lately of getting waves of snowshoe spam that follow the same pattern. They come in batches of 3 or 4 at a time. The ...
1
vote
1answer
42 views

postfix disable blacklist checking for registered user

Many users has dynamic IP and sufficient number of these IP is blacklisted. How to disable check Postfix blacklist only for registered user? I want only block incoming mail from blacklisted IPS only. ...
0
votes
1answer
67 views

How do I stop SPAM from being sent from my server? [duplicate]

I have a VPS which I rent and it is running Centos 6. The VPS has ZPanel installed which is used to host some websites and emails. One of my clients has noticed thousands of 'undeliverable' messages ...
0
votes
2answers
45 views

Exim - block incoming mail from blacklisted IPS only

I would like to check for blacklists only for incoming e-mail. I have users who usually get dynamic IP's which are blacklisted so they are not able to send the e-mail if I turn the blacklist option ...
1
vote
2answers
23 views

Will a mail relay be blacklisted if it accepts a mail relay request then later sends NDR?

Got a question about blacklisting behaviour. Internet MX records for "mydomain.com" point to my anti-spam gateways. The anti-spam gateways then relay the email to my mail server. If someone sends an ...
0
votes
1answer
48 views

Detect IP blocking or blacklisting

Unable to access a cloud server (Windows) from a particular public IP provided by the ISP. Tried to PING, tracert, telnet everything, nothing worked. No deny rule mentioned in the firewall. Properly ...
-6
votes
1answer
54 views

Automated blacklist checker [closed]

Has anyone used any of these services and if so, is there one you can recommend? Ideal target would be for an MSP so perhaps would like real time alerts if an IP shows up on blacklist for perhaps ...
0
votes
1answer
73 views

What are my options for sending email from my VPS with a Blacklisted IP [duplicate]

I have postfix and dovecot running on debian 7, I can send mail fine, but it keeps going to my spam folder when sent to google accounts. Another user who doesn't use gmail said it was delivered to his ...
0
votes
0answers
96 views

How do I remove a blacklisted IP from RealVNC server?

From my Windows Event Viewer I see that an IP is blacklisted, when trying to connect I get Connections: rejecting blacklisted connection: 192.168.1.89 Where is the blacklist maintained so I can ...
0
votes
1answer
149 views

Two servers, severals domains, reverse DNS and blacklist

I will try to explain the context. 2 VPS with PLESK 11.5 The first (named vps67877.ovh.net - we call it v67) is a mail server (ip 37.187.33.38) The second (named vps68789.ovh.net - we call it v68) ...
-1
votes
1answer
135 views

Blacklist and whitelist of domains on Debian Linux router

I have to create blacklist and whitelist in small office for two groups of employees. I divided the users into two group: First group has block all webpages except about 80 domains which i want to ...
12
votes
3answers
854 views

How to remove ourselves from nudity blacklists? [duplicate]

We recently bought our domain. It turns out, two generations ago, it was a porn site. Now we're still blocked in some filters, resulting in blocked pages at several corporate routers. I'm now ...
0
votes
1answer
37 views

Evaluation of mail server configuration

I have a mail server configured to use DNS real-time blacklists (DNSRBLs), e.g. zen.spamhaus.org, to determine whether delivered email is spam or not. I would like to evaluate my mail server's ...
0
votes
0answers
245 views

ModSecurity on Apache (Debian Wheezy), real-time IP-Blacklist from file

I am creating and updating an ip-blacklist dynamically with a php script based on specific bot behaviors or actions. The functions I use in the script add or remove ips, based on ban-duration set for ...
0
votes
2answers
70 views

Can I get postfix to drop all mail meant for a specific MX?

TL;DR: can I DISCARD outgoing mail to a specific server by DNS name of the MX record , or failing that, by its IP? We've some 'trouble' (well, more of an annoyance really), of people filling out some ...
0
votes
0answers
77 views

RPZ in Bind and wildcards

I'n not sure if this is possible. I am able to setup a DNS with RPZ zones for blacklisted domains and whitelisted domains. The problem is that I want to whitelist only a couple domains while ...
0
votes
1answer
228 views

Azure IP Blacklisted

Am hosted on Windows Azure and the IP provided as the A record is blacklisted in several spam alert groups. This is because of some other URL's that seem to share the same IP and is affected with ...
0
votes
1answer
1k views

Weird CBL blacklisting (cutwail spambot ?!)

I have a weird problem and I wonder if anyone can help me as I really don't know what else to do. I'm administering a Linux server (Fedora 17), for a SMB company (~100 LAN computers). This server ...
0
votes
1answer
61 views

Blocking an IP that is constantly accessing our website

Yesterday I noticed in our apache logs that there is someone constantly accessing our website, sometimes 5 times a second or so, and sometimes once in 5 seconds. However, it's happening 24 hours a ...
2
votes
2answers
51 views

Are only IP-Addresses Blacklisted or also Domains?

Unfortunately one of the forms of my website was used to send completely sensless spammails. As I found out through "http://mxtoolbox.com" that my IP-address is listed on two blacklists, I want to set ...
2
votes
1answer
74 views

Postfix thinks IP is in blacklist, but is not actually listed in blacklist

Got a bit of a weird problem here with Postfix. Been getting a whole bunch of notices where fail2ban has banned 69.164.196.21 (ryujin.darkdna.net) for failures against Postfix. Here is a relevant ...
3
votes
2answers
85 views

SMTP: Which IP should I monitor?

I use a relay server to deliver external mails. I use relay server's IP in SPF record. But I'm not sure about blacklist monitoring/checking. Should I check main server's IP or relay's IP?
0
votes
1answer
17 views

Logging redirects and rewrites

I'm using the following blacklist .htaccess directives in apache v2.2 (on mediatemple): http://perishablepress.com/5g-blacklist-2013/ I want to get a sense of how often these directives are ...
2
votes
1answer
211 views

Postfix: Resend 'hard' bounces

I had a number of messages get rejected by the recipient's mail server with a status 550 code due to an IP address blacklist. I've sorted the problem that caused the host to become blacklisted, and ...
0
votes
1answer
41 views

Access to Google's blacklists for my firewall

I know that certain google products automatically access Google's blacklist database. Can I do the same? Is there maybe a cleaned-up dns server against which I could verify my own dns queries? Or some ...
-1
votes
1answer
606 views

Microsoft , Hotmail , Live , MSN, Outlook , unable to send emails and no support received from microsoft in 3 months we are trying asking for that [closed]

Ok this is somenthing unbelievable, we have a website, users sign up and receives links to confirm they signed up BUT: 1 - microsoft blocked our IP (no one with microsoft email account can receive ...
0
votes
1answer
80 views

Steps to make sure network is not blacklisted…Again

I have an interesting issue. I have a client that just got blacklisted due to spam being sent out over the last 2 days. I have my firewall configured to only allow mail to go outbound on port 25 ...
0
votes
1answer
286 views

False positive rate of CBL

We've come into the office (30+ networked systems) this morning to find that our email server is blacklisted on the CBL for: This IP address is infected with, or is NATting for a machine infected ...
0
votes
1answer
91 views

Should I put SPF checks before or after RBL checks in Postfix SMTP server?

I am setting up a Postfix SMTP server (pre v2.10) and was thinking to put the smtpd_recipient_restrictions as follows. smtpd_recipient_restrictions= permit_mynetworks, ...
1
vote
2answers
176 views

Mac server infected with spam agent

We have a huge trouble :( .. Our mac server makes a spam delivery. Our IP already blacklisted in about a dozen of servers (checked with http://mxtoolbox.com/). We have another computers in the same ...
0
votes
0answers
37 views

On multiple spamming-blacklists after desinfecting network computers

We are currently listed on a couple of spam-blacklists since last week. I have taken the following approach to prevent this from reoccurring: scan every (windows)-device in the building using ...
0
votes
0answers
83 views

Exchange 2010 being blacklisted

Let me start with thanking everyone for trying to help. First, let me fill everyone to the environment we are running. We are using Exchange 2010 in virtual Windows 2008 R2 (VMWare 4.5). We are ...
0
votes
2answers
683 views

Gmail is blocking our email, and the IP address listed in the returned email is not our main mail address

Our mx records point to a different IP address than our main public address. However the mail being sent, SMTP is pointing to our main public IP address. The email using the address that SMTP is using ...
1
vote
0answers
492 views

Blocking specific java executable JARs

I have been trying to figure out how to block specific Java applications (Minecraft) for a while now without success. I want to stop people from being able to run a specific JAR file or at least ...
1
vote
3answers
459 views

IPTables add an IP to IPSet list

How to correctly add an IP address to ipset from an iptables rule? Or isn't that possible at all? This rule doesn't work for me: -A INPUT -m recent --name IP_LIST --set Type of IP_LIST is hash:net ...
0
votes
1answer
123 views

I cannot access my websites but everyone else can [closed]

About 4 days ago I could no longer view my websites from my IP address. I can see it through proxies and other IPs, everyone else sees it fine. I've contacted my host, they say I'm whitelisted and ...
0
votes
1answer
124 views

Global Authority for Blacklisting IPs

I know that there are few common ways to block attacking IPs (such as deny in htaccess). Additional to that, we could get a huge list of IPs to block from misc sites such as : ...
0
votes
1answer
2k views

banning all *azenv.php request to my server

I am using apache 2.2 under centos6, and I'm recently having some kind of accesses that are unwanted, and that I wish to ban. For instance, I have this in my error_log: [Sun Apr 14 01:06:29 2013] ...
1
vote
2answers
1k views

Black Hole DNS on Windows DNS Server

I am looking at configuring our Windows DNS Servers for some type of DNS based blackhole operation. Ideally, we would be able to use feeds from MalwareDomains.com or the like. I was curious how one ...
0
votes
1answer
308 views

My shared IP address is blacklisted. What's the quickest way of temporarily use another SMTP account with the same domain?

I manage a few shared hosting accounts for some customers in different hosting providers. One of the IPs of those accounts was blacklisted and my customer hasn't been able to send emails to Google ...
0
votes
1answer
419 views

A record blacklisted but not the originating IP of affected messages - Gmail rejections

A customer's email is being rejected by gmail with the following codes: Action: failed Status: 5.7.0 Diagnostic-Code: smtp; 554 5.7.0 Reject, id=17756-61 - SPAM I see the A record for the domain, ...
1
vote
1answer
422 views

In postfix how can I conditionally enforce check_sender_access

I am servicing 2 virtual domains: domain1.org , domain2.org. I want to enforce the following policy: If a client connects from an IP address in $mynetworks then I want to allow only mails for which ...
0
votes
2answers
727 views

Why are my emails going to spam folder?

My server ip is 78.46.138.249 and none of the blacklists I could find blacklist my domain. Nevertheless, many of my customers recieve their emails in their SPAM folder. I just created a live.com ...
1
vote
2answers
112 views

multiple blacklist files shorewall

I have been blocking by ip with shorewall and the blacklist file. I have decided to block a few country entirely and the blacklist file is huge! So my question is this: Is it possible to have ...
2
votes
2answers
1k views

Blacklist preventing DNS lookups?

To make a long story short, some users at another company who I have a lot of email correspondence with started having problems sending me email, they would get a message from the mailer daemon at ...
1
vote
1answer
514 views

How should I manually add IP addresses to denyhosts?

I have a few IP addresses I want to add manually to denyhosts because they're huge sources of inbound spam. What's the best way to do this? Or should I not be messing with it? I want to manually ...
0
votes
0answers
677 views

Multiple Duplicate Lines when running iptables -L?

Specifically talking about an Ubuntu 10.04 LTS server (Lucid Lynx), although its probably applicable to other Linux versions. I was trawling through the logs for a few websites, doing some spring ...
2
votes
1answer
94 views

at what level modprobe operates ? - linux

I have a machine with Ubuntu 12.04 64 bit, i have the need for blacklisting a module, i have blacklisted it in blacklist.conf but nothing happened; i have solved my problem passing ...
3
votes
2answers
4k views

Gmail.com detect mail as spam, but the server is not on any BlackList

I have an issue with Google. (GMail to be exact) About 1 month ago, we had a security breach, and mail was relayed through our servers. we got listed in almost ALL Black-Lists :( we fixed the ...
2
votes
1answer
151 views

How do I implement IP-based export restrictions for my data stored on Amazon S3?

A little background: Corporate wants to make our downloads unavailable to U.S. export-restricted countries like North Korea, Iran, Syria, etc. Restriction by IP-block is considered good enough. (Yes, ...