The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
0answers
30 views

mod_security RBL - apparent false positive

I'm struggling with an RBL rule in mod_security under apache 2.2 that seems to be giving me a false positive. I see the following in the audit log (IP address redacted): Message: RBL lookup of ...
0
votes
1answer
35 views

URIBL_BLOCKED on Ubuntu 14.04 Server with working Dnsmasq

I've set up a small mail server which includes Spam Assassin. Everything seems to work great except one. SA docs suggest installing a caching DNS server to keep some RBLs from blocking the server over ...
14
votes
2answers
907 views

What are the best methods for catching snowshoe spam?

I'm using Smartermail for my small mailserver. We've been having a problem lately of getting waves of snowshoe spam that follow the same pattern. They come in batches of 3 or 4 at a time. The ...
0
votes
2answers
69 views

Exim - block incoming mail from blacklisted IPS only

I would like to check for blacklists only for incoming e-mail. I have users who usually get dynamic IP's which are blacklisted so they are not able to send the e-mail if I turn the blacklist option ...
0
votes
1answer
63 views

Windows 2012 Essentials DNS problems querying certain RBLs

I'm running a mail server, Smartermail (SM) on Windows 2012 Essentials. The server is also doing DNS, but has no other roles. The DNS server is using the root hints and has no forwarders configured. ...
0
votes
1answer
206 views

Installed RBLDNSD for making a custom RBL but something is missing, could you help us?

We have successfully installed RBLDNSD with the idea of having a custom RBL server. Now we have started to make some testing adding some IPs to the our blacklist, and also have configured Exim (Cpanel ...
0
votes
0answers
138 views

Spamassassin: using specific DNS server for DNSBL lookups

High volume mailserver. I need 2 things operating simultaneously: local caching nameserver (BIND) rev dns server for DNSBL (SORBS) lookups The way I set it up for now is using RBLDNSD bound to ...
2
votes
1answer
78 views

Postfix thinks IP is in blacklist, but is not actually listed in blacklist

Got a bit of a weird problem here with Postfix. Been getting a whole bunch of notices where fail2ban has banned 69.164.196.21 (ryujin.darkdna.net) for failures against Postfix. Here is a relevant ...
0
votes
1answer
140 views

Postfix - RBL check behind relayhost

We are running a mail server which is responsible for a sub-domain (say, dom1.example.com). All the mails sent from Internet are received through our relayhost (mail server responsible for ...
0
votes
0answers
137 views

How to send a test e-mail from an RBL blocked host?

In order to test a whitelisted DNS entry: How can I send an e-mail from a blocked (in RBL) host, is there such a test service even exists?
0
votes
2answers
184 views

SMTP / HELO and RBL black listing

We've been having many issues with our external IP address being put on RBL's and blacklisted. We are using a 3rd party, hosted SMTP e-mail and we have two locations using it. Our TLD is ABC.com. ...
0
votes
2answers
269 views

Why does mail, from some domain, sent through someisp.com, get blocked by the isp's webserver being listed in RBLs? [closed]

Today I one of our customers forwarded to me a mail from the ISP of one of her mail recipients that says they're blocking my customer's email because our webserver IP is listed in some RBLs. Of ...
0
votes
2answers
167 views

How often do MXLogic lists get updated?

Some domain refused to accept email from my domain due to MXLogic filtering. I've sent an email to falsepositives@mxlogic.com and they responded promptly that they changed their records. Question: ...
2
votes
2answers
204 views

Monitor IP for RBLs

Is there any way to monitor an IP against RBLs. I want to have an alert over email when my IP is blacklisted in any RBL over internet. Any help?
3
votes
1answer
425 views

Which RBL's does sophos use?

Anyone know where I can find the a list of which RBL's Sophos use's? I have checked their website with no luck, and currently awaiting a response from their technical support. Thank You in advance ...
1
vote
2answers
129 views

How can I receive mails from otherwise blacklisted servers?

On the mail servers I set up in our company, I use several blacklists in postfix. These really help take care of the spam we get send our way. But every once in a while one of our (potential) ...
0
votes
2answers
877 views

check_client_access and RBLs

In an attempt to better fight spam, I've configured Postfix like this: smtpd_client_restrictions = check_client_access hash:/etc/postfix/client_whitelist reject_unknown_client ...
2
votes
5answers
12k views

How do I remove IP from sorbs.net blacklist?

Our email server has ended up in the sorbs.net blacklist and we're going round in circles trying to get it removed, currently this is causing down-time between our suppliers. I am a developer and not ...
6
votes
2answers
248 views

Which DNS Black Lists would you recommend to discard spam in pre-queue?

There are many black lists out there, with bad and good reputations. Also, some people recommend to use RBL lists only in score-based systems (like spamassassin) while others (including commercial ...
1
vote
3answers
63 views

does it still have any sense to directly drop mails that trigger RBLs?

Once upon a time, using RBLs to drop mails was actually a good idea. These days seems it is no more possible for a reason or the other, so every one switched / is_switching to just use RBLs as another ...
3
votes
1answer
5k views

Postfix Whitelist before recipient restrictions

Alright. Some background. We have an anti-spam cluster trucking about 2-3 million emails per day, blocking somewhere in the range of 99% of spam email from our end users. The underlying SMTP server ...
0
votes
2answers
411 views

What DNS Records / Zones are required for setting up a dnsbl server?

I'm trying to setup my own custom dnsbl server for blocking spam. I have successfully created a server running rbldnsd but am curious about what DNS records I would need to have in place so that my ...
0
votes
2answers
196 views

DNSBL Server - Linux Distribution Recommendations?

I'm preparing to build a publicly accessible DNSBL server. Which Linux distribution would you recommend for something like this? I'm mainly interested in: 1) General security. 2) Stability. 3) ...
0
votes
4answers
301 views

Does it matter if your web server's IP is RBL'ed?

We have a web server (on Slicehost) with an IP address that has been blacklisted in at least one DNSRBL (FIVETEN). The host is not currently a source of mail, in fact all mail for the domain goes ...
3
votes
2answers
1k views

Best Postfix spam RBL policy weight daemon?

I just heard about policyd-weight so I did an apt-cache search policyd which returns three options: policyd-weight postfix-policyd postfwd Which one is the best, and do you have any tips on ...
0
votes
1answer
70 views

How would I test rblserver?

I'm using few rbl servers, and all of the sudden i see slowness, as soon as I remove all rblservers, it works very fast as it used too, other than removing one by one server is there a way to test rbl ...
1
vote
3answers
160 views

Are there any tools for comparing DNSBL effectiveness?

I just added a new DNSBL to the list of ones that I use on my small mailserver. I set it up to be first on the list because I wanted to see what it missed but other lists caught. I'm watching mail ...
4
votes
3answers
769 views

Customer's IP Listed on RBL - What steps do you use to prevent black listing?

Customer called saying their e-mail was bouncing from particular vendors. Investigated it and identified they were listed on more than one RBL/CBL. Restricted firewall to only allow traffic on port ...