Hot Downloads

×

Notice

The forum is in read only mode.
Welcome, Guest
Username: Password: Remember me

TOPIC:

Re: IP listed on blacklist 10 years 11 months ago #33699

  • ZiPPy
  • ZiPPy's Avatar Topic Author
  • Offline
  • Elite Member
  • Elite Member
  • Posts: 500
  • Thank you received: 0
Still on the dang blacklist.

You're telling me we have no Exchange guru's hanging around the forums. Cisco with some Exchange in the back pocket?

There HAS to be something else one can do to remove themselves from SpamCannibal???


ZiPPy
ZiPPy

Re: IP listed on blacklist 10 years 11 months ago #33717

  • ZiPPy
  • ZiPPy's Avatar Topic Author
  • Offline
  • Elite Member
  • Elite Member
  • Posts: 500
  • Thank you received: 0
aaaaand no replies. nice.
ZiPPy

Re: IP listed on blacklist 10 years 11 months ago #33723

  • Nevins
  • Nevins's Avatar
  • Offline
  • Elite Member
  • Elite Member
  • Posts: 438
  • Karma: 4
  • Thank you received: 9
I'm not an exchange expert at all but you should be able to block requests to/from them at your router based on their server IP. Basically meaning instead of them eating your bandwidth up by their tarpit telling the spam server (you) to send very small packets you have zero communication with them.

I think Access control lists may be a solution for this but to be honest I'm not sure I'm just tossing my best guess out there.
Useful Threads
================================
www.firewall.cx/forum/2-basic-concepts/3...e-resource-page.html

Re: IP listed on blacklist 10 years 11 months ago #33727

  • ZiPPy
  • ZiPPy's Avatar Topic Author
  • Offline
  • Elite Member
  • Elite Member
  • Posts: 500
  • Thank you received: 0
I would agree for a few IP's ...up to ten at most! But when your dealing with hundreds of IP's and from various ranges, that won't work.

Something within Exchange isn't setup correctly, or a security vulnerability is being exposed. Looking into adding a dedicated spam solution such as a Barracuda or IronPort.


ZiPPy
ZiPPy

Re: IP listed on blacklist 10 years 11 months ago #33728

  • S0lo
  • S0lo's Avatar
  • Offline
  • Moderator
  • Moderator
  • Posts: 1577
  • Karma: 3
  • Thank you received: 7
Hi ZiPPy, I assume here that when you queried spamcannibal online database for your server's IP you found it blocked.

There is a possibility that the generic rDNS record is causing the block. Have a look at some of the rules they have like this page:

www.spamcannibal.org/statsgeneric.html

You might need to create a PTR record (reverse IP lookup) for the IP of your server to point back to it's original DNS name (like mail.abc.com or smtp.abc.com). The following explains:

aplawrence.com/Blog/B961.html

I'm not positive that this is the problem, but I'd give it a try.
Studying CCNP...

Ammar Muqaddas
Forum Moderator
www.firewall.cx

Re: IP listed on blacklist 10 years 11 months ago #33733

One of the reason your ip will be blocked is because of sending spam or viruses, may be it's not you or your exchange, it could be a trojan on one of the computers in your network.
So how to know which one? you should block port 25 out from your network to internet, then no one can send email and hence no spam.
If you want users inside your network to be able to send email then you can setup an exchange server as smtp relay with proper Anti spam and anti virus.
And if you want to know who (which ip) are sending spams then you should use some kind of monitoring for port 25 out from your network.

Look at the link below (PDF) and see recommendations there.

docs.yahoo.com/docs/pr/pdf/asta_soi.pdf

cheers,
always Face your Fears...
Time to create page: 0.108 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup