Questions tagged [rbl]
Real-time Blackhole is a database of IP addresses known to send spam, accessible over DNS, with specific responses to determine whether a host should be rejected or allowed.
62
questions
0
votes
2
answers
391
views
How to disable the default RBLs used by rspamd?
I'd like to use an RBL in rspamd without using all the preconfigured RBLs, but it seems that the configuration in /etc/rspamd/local.d/rbl.conf can only add new lists, not remove the default ones.
The ...
- 1,663
1
vote
1
answer
331
views
Postfix no longer rejecting emails based on spam block lists
My postfix server is configured to reject emails based on a couple of spam block lists administered by spamhaus and spamcop.
After noticing that I've been receiving more spam than normal recently, I'...
- 331
1
vote
1
answer
154
views
After adding a new DNSBL to Sendmail, how can I resubmit an email to see if it will be rejected?
TL;DR
How can I fool my own sendmail into thinking an email comes from a particular ip address, so that it rejects the message due to a DNSBL match?
Details:
I run my own mail server, and most spam is ...
- 73
0
votes
1
answer
581
views
what matters MTA's IP or hostname or both
There is no proper single article or I haven't researched properly, to find what does matters most for MTA's reputation IP or the hostname of the MTA or both matters equally.
I am asking this question ...
0
votes
0
answers
101
views
google apps domain gives diffrent servers when emailing out then mxtoolbox search shows
When I search a domain that uses google apps I get 10 results mx servers for the domain.
similar to this alt1.aspmx.l.google.com alt2.aspmx.l.google.com
when I recieve emails I get completly ...
- 43
0
votes
3
answers
135
views
Sharing IP black lists
Are there any tools similar to fail2ban that would allow sharing of IP black lists? What I'm looking for is something similar to a DNS based blackhole list or real-time blackhole list as is used to ...
- 101
2
votes
1
answer
83
views
How do I know if an abuse report about unsolicited is actually about my server?
I received an Abuse-Message from the operators of dnsbl.de. To me it sounds like it has nothing to do with me, but since it is too serious I don't want to do "guess work" and check whether it really ...
- 177
5
votes
2
answers
908
views
Postfix: ACCEPT if RBL and SPF checks pass, DUNNO/greylist otherwise. How to do it?
I would like to accept all clients that pass RBL and SPF checks (and possibly some checks, but these are minimum requirements for me), and greylist those who don't. When a client passes the SPF check (...
- 51
1
vote
1
answer
389
views
How to get postfix to check all 'Recieved:' headers against an RBL?
I have several rbls listed in smtpd_client_restrictions, but this only checks the client IP against the RBLS. Is there any way to get postfix to check each Recieved: line against the RBL like ...
- 131
1
vote
1
answer
427
views
Find an IP that is known to be on a DNSBL
I am configuring Zabbix to check my IPs against several DNSBLs. My IPs are currently not blacklisted. My monitoring needs to be tested, to verify that it will alert properly if one of my IPs does ...
- 675
1
vote
1
answer
590
views
IPBlockListProvider vs. IPAllowListProvider
I am using Spamhaus SBL and Spamcop as RBL providers in Echange 2016 which works fairly well for me. However, some connections are blocked which really shouldn't. To prevent false positives I went on ...
- 11
0
votes
0
answers
378
views
Postfix NOQUEUE reject messages do not contain reason for rejection, why?
I have a postfix setup similar to ISPconfig.org's ruleset. Because of a failing RBL (SERVFAIL DNS response), Postfix rejected many incoming messages with a 451 4.7.1. type temporary failure instead of ...
- 139
0
votes
1
answer
2k
views
How to test postfix DNSBL whitelist?
How can I test if my postfix whitelist works correctly (assuming I don't have access to any address currently listed on dnsbl).
I'm not sure if my whitelist works ok.
Here's my config:
...
- 592
2
votes
1
answer
569
views
DNS server in RBL
While SMTP servers should not be on RBL, to ensure deliverability of emails, what about DNS servers themselves? Does it matter? I am asking this question because multiple Route53 DNS servers are on ...
0
votes
1
answer
749
views
IP on postfix whitelist is still blocked
Because an specific IP is often von a black list provider I have to put this IP on a whitelist because there are too many false-positives.
I configured it some time ago and I am a Windows ...
1
vote
1
answer
967
views
Postfix - Skip RBL checks after a SPF Pass
I've started using policyd-spf and am using the following recipient restriction. What I'd like is for senders that pass the SPF check to skip any RBL checks. Unfortunately that's not happening.
...
- 113
1
vote
0
answers
252
views
How to RBL block forwarded email in postfix?
I have RBL blocking successfully configured in postfix, using reject_rbl_client in the smtpd_recipient_restrictions section.
However, I use a mail forwarding service through which I receive some spam ...
- 111
3
votes
0
answers
112
views
Combating a persistent spam list
We use Office 365 as our primary mail provider. We have an internal mail server that we use for relaying things like reports from our SSRS, scan to inbox for old scanners, etc. It is an IIS SMTP on ...
- 425
0
votes
0
answers
605
views
setting up my own RBL server for postfix
I would like to setup my own rbl server for use with postfix.
Caching
The rbl server would reach out to a list of rbl servers.
I would also like to be able to collect stats to see if rbl servers are ...
- 156
0
votes
2
answers
99
views
Spam getting through despite being listed on an RBL?
Our spam filter (Vamsoft ORF) is configured to look at zen.spamhaus.org among a few others. This morning, I had a mailbox full of spam. As part of my normal procedure, I opened the email, read the ...
- 348
0
votes
0
answers
288
views
Generic way to download DNS Blacklist
I am looking for a generic way to download (multiple) DNS blacklists. The reason is that I would like to cache them locally for faster lookup. The lookup is not for an MXer, but for a log analysis ...
- 1,215
1
vote
1
answer
1k
views
Bounce mail blocked by Trend Micro Email Reputation Service
When I tryied to send an email, the following error appears:
200.123.99.139 does not like recipient.
Remote host said: 550 5.7.1 Mail from 67.222.38.55 has been blocked by Trend Micro Email ...
- 131
0
votes
1
answer
45
views
Losing headers from Relay server
Trying to troubleshoot spam filtering. I have a relay setup to accept all my incomming emails and filter them before it hits the main server. I cant seem to get spamassassin to put the headers in for ...
- 121
0
votes
1
answer
573
views
SpamAssassin stops RBL DNS-based tests after some time
I faced the problem with my email server: too much junk mail because of failing DNS RBL (SURBL, URIBL) tests.
I prepared test message with SURBL test URL and checked it with "spamassassin" binary and ...
6
votes
2
answers
2k
views
Spamassassin: Bypass /etc/resolv.conf DNS for querying DNSBL?
Question
Is there a way to let spamassassin bypass my linux system's dns servers to query DNSBLs?
Background Info
When my Server receives email, it is checked by spamassassin. One of this checks ...
- 142
1
vote
0
answers
452
views
Is there a way to configure postfix to bypass spam/RBL checks on a particular destination hostname or username?
I'm running Postfix on CentOS 7, a fairly generic implementation, but I do employ some RBL checking on incoming mail. I like using SORBS for example but I have a few clients who seem to have issues ...
- 361
2
votes
1
answer
675
views
check spamassassin DNSBL results
Is there a way to check the results of spamassassin on an email when it checks DNSBL?
I see nothing in the maillog and nothing in the mail header.
I do not know if it is actually querying the DNSBLs ...
- 343
7
votes
1
answer
4k
views
How Does DNSWL work? How can I gain better trust? [closed]
How does DNSWL work? It's clear to me when someone report a spam, but how can I gain a higher score/trust?
Do some companies report "good" servers? Or will the score go up with time without reporting ...
- 525
2
votes
1
answer
2k
views
Does postfix cache RBL queries?
This is driving me nuts… Linux Debian + postfix…
/etc/postfix/main.cf has the following lines:
smtpd_recipient_restrictions =
check_recipient_access hash:/etc/postfix/access,
...
- 341
3
votes
1
answer
2k
views
Configure Barracuda Spam Filter behind Postfix to use client IP when do RBL-checking
I have the following setup:
Internet -> Postfix Mail setup as Proxy -> Barracuda Spam Filter -> Microsoft Exchange
I have tried searching through the documentation and configuration panels to see ...
- 73
7
votes
2
answers
32k
views
How to enable RBL checking in postfix?
How to enable RBL filters in postfix?
My current configuration:
submission inet n - n - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=...
- 592
1
vote
1
answer
776
views
mod_security RBL - apparent false positive
I'm struggling with an RBL rule in mod_security under apache 2.2 that seems to be giving me a false positive. I see the following in the audit log (IP address redacted):
Message: RBL lookup of 4.3....
- 162
0
votes
1
answer
575
views
URIBL_BLOCKED on Ubuntu 14.04 Server with working Dnsmasq
I've set up a small mail server which includes Spam Assassin. Everything seems to work great except one. SA docs suggest installing a caching DNS server to keep some RBLs from blocking the server over ...
- 103
21
votes
4
answers
3k
views
What are the best methods for catching snowshoe spam?
I'm using Smartermail for my small mailserver. We've been having a problem lately of getting waves of snowshoe spam that follow the same pattern. They come in batches of 3 or 4 at a time. The ...
- 436
0
votes
2
answers
1k
views
Exim - block incoming mail from blacklisted IPS only
I would like to check for blacklists only for incoming e-mail. I have users who usually get dynamic IP's which are blacklisted so they are not able to send the e-mail if I turn the blacklist option on....
- 1
0
votes
1
answer
236
views
Windows 2012 Essentials DNS problems querying certain RBLs
I'm running a mail server, Smartermail (SM) on Windows 2012 Essentials. The server is also doing DNS, but has no other roles. The DNS server is using the root hints and has no forwarders configured. ...
- 436
2
votes
3
answers
358
views
is there a PAM module for DNSBL lookups?
I have been enumerating the remaining security concerns on one of my back-end production servers, when I came to the realization that something which could be incredibly useful was missing from my ...
- 571
0
votes
1
answer
1k
views
Installed RBLDNSD for making a custom RBL but something is missing, could you help us?
We have successfully installed RBLDNSD with the idea of having a custom RBL server.
Now we have started to make some testing adding some IPs to the our blacklist,
and also have configured Exim (Cpanel ...
0
votes
1
answer
72
views
Evaluation of mail server configuration
I have a mail server configured to use DNS real-time blacklists (DNSRBLs), e.g. zen.spamhaus.org, to determine whether delivered email is spam or not.
I would like to evaluate my mail server's ...
- 133
2
votes
1
answer
789
views
Postfix thinks IP is in blacklist, but is not actually listed in blacklist
Got a bit of a weird problem here with Postfix.
Been getting a whole bunch of notices where fail2ban has banned 69.164.196.21 (ryujin.darkdna.net) for failures against Postfix.
Here is a relevant ...
0
votes
1
answer
340
views
Postfix - RBL check behind relayhost
We are running a mail server which is responsible for a sub-domain (say, dom1.example.com). All the mails sent from Internet are received through our relayhost (mail server responsible for example.com)...
- 1
0
votes
2
answers
542
views
SMTP / HELO and RBL black listing
We've been having many issues with our external IP address being put on RBL's and blacklisted.
We are using a 3rd party, hosted SMTP e-mail and we have two locations using it. Our TLD is ABC.com. ...
- 870
0
votes
2
answers
405
views
Why does mail, from some domain, sent through someisp.com, get blocked by the isp's webserver being listed in RBLs? [closed]
Today I one of our customers forwarded to me a mail from the ISP of one of her mail recipients that says they're blocking my customer's email because our webserver IP is listed in some RBLs.
Of ...
- 5,826
0
votes
2
answers
220
views
How often do MXLogic lists get updated?
Some domain refused to accept email from my domain due to MXLogic filtering.
I've sent an email to [email protected] and they responded promptly that they changed their records.
Question: ...
- 153
2
votes
2
answers
351
views
Monitor IP for RBLs
Is there any way to monitor an IP against RBLs. I want to have an alert over email when my IP is blacklisted in any RBL over internet.
Any help?
- 781
4
votes
1
answer
1k
views
Which RBL's does sophos use?
Anyone know where I can find the a list of which RBL's Sophos use's? I have checked their website with no luck, and currently awaiting a response from their technical support.
Thank You in advance
...
- 87
1
vote
2
answers
187
views
How can I receive mails from otherwise blacklisted servers?
On the mail servers I set up in our company, I use several blacklists in postfix. These really help take care of the spam we get send our way.
But every once in a while one of our (potential) ...
- 4,647
1
vote
1
answer
447
views
How to skip DNSBL checks for authenticated main in Exim4
I have the following ACL with Exim4:
acl_check_rcpt:
deny message = DNSRBL Access denied - $sender_host_address \
listed by $dnslist_domain\n$dnslist_text
dnslists ...
- 651
1
vote
2
answers
2k
views
check_client_access and RBLs
In an attempt to better fight spam, I've configured Postfix like this:
smtpd_client_restrictions =
check_client_access hash:/etc/postfix/client_whitelist
reject_unknown_client
...
- 567
11
votes
5
answers
81k
views
How do I remove IP from sorbs.net blacklist?
Our email server has ended up in the sorbs.net blacklist and we're going round in circles trying to get it removed, currently this is causing down-time between our suppliers.
I am a developer and not ...
- 327