- Posts: 500
- Thank you received: 0
IP listed on blacklist
14 years 9 months ago #33699
by ZiPPy
ZiPPy
Replied by ZiPPy on topic Re: IP listed on blacklist
Still on the dang blacklist.
You're telling me we have no Exchange guru's hanging around the forums. Cisco with some Exchange in the back pocket?
There HAS to be something else one can do to remove themselves from SpamCannibal???
ZiPPy
You're telling me we have no Exchange guru's hanging around the forums. Cisco with some Exchange in the back pocket?
There HAS to be something else one can do to remove themselves from SpamCannibal???
ZiPPy
ZiPPy
14 years 9 months ago #33723
by Nevins
Useful Threads
================================
www.firewall.cx/forum/2-basic-concepts/3...e-resource-page.html
Replied by Nevins on topic Re: IP listed on blacklist
I'm not an exchange expert at all but you should be able to block requests to/from them at your router based on their server IP. Basically meaning instead of them eating your bandwidth up by their tarpit telling the spam server (you) to send very small packets you have zero communication with them.
I think Access control lists may be a solution for this but to be honest I'm not sure I'm just tossing my best guess out there.
I think Access control lists may be a solution for this but to be honest I'm not sure I'm just tossing my best guess out there.
Useful Threads
================================
www.firewall.cx/forum/2-basic-concepts/3...e-resource-page.html
14 years 9 months ago #33727
by ZiPPy
ZiPPy
Replied by ZiPPy on topic Re: IP listed on blacklist
I would agree for a few IP's ...up to ten at most! But when your dealing with hundreds of IP's and from various ranges, that won't work.
Something within Exchange isn't setup correctly, or a security vulnerability is being exposed. Looking into adding a dedicated spam solution such as a Barracuda or IronPort.
ZiPPy
Something within Exchange isn't setup correctly, or a security vulnerability is being exposed. Looking into adding a dedicated spam solution such as a Barracuda or IronPort.
ZiPPy
ZiPPy
14 years 9 months ago #33728
by S0lo
Studying CCNP...
Ammar Muqaddas
Forum Moderator
www.firewall.cx
Replied by S0lo on topic Re: IP listed on blacklist
Hi ZiPPy, I assume here that when you queried spamcannibal online database for your server's IP you found it blocked.
There is a possibility that the generic rDNS record is causing the block. Have a look at some of the rules they have like this page:
www.spamcannibal.org/statsgeneric.html
You might need to create a PTR record (reverse IP lookup) for the IP of your server to point back to it's original DNS name (like mail.abc.com or smtp.abc.com). The following explains:
aplawrence.com/Blog/B961.html
I'm not positive that this is the problem, but I'd give it a try.
There is a possibility that the generic rDNS record is causing the block. Have a look at some of the rules they have like this page:
www.spamcannibal.org/statsgeneric.html
You might need to create a PTR record (reverse IP lookup) for the IP of your server to point back to it's original DNS name (like mail.abc.com or smtp.abc.com). The following explains:
aplawrence.com/Blog/B961.html
I'm not positive that this is the problem, but I'd give it a try.
Studying CCNP...
Ammar Muqaddas
Forum Moderator
www.firewall.cx
14 years 9 months ago #33733
by Alans
always Face your Fears...
Replied by Alans on topic Re: IP listed on blacklist
One of the reason your ip will be blocked is because of sending spam or viruses, may be it's not you or your exchange, it could be a trojan on one of the computers in your network.
So how to know which one? you should block port 25 out from your network to internet, then no one can send email and hence no spam.
If you want users inside your network to be able to send email then you can setup an exchange server as smtp relay with proper Anti spam and anti virus.
And if you want to know who (which ip) are sending spams then you should use some kind of monitoring for port 25 out from your network.
Look at the link below (PDF) and see recommendations there.
docs.yahoo.com/docs/pr/pdf/asta_soi.pdf
cheers,
So how to know which one? you should block port 25 out from your network to internet, then no one can send email and hence no spam.
If you want users inside your network to be able to send email then you can setup an exchange server as smtp relay with proper Anti spam and anti virus.
And if you want to know who (which ip) are sending spams then you should use some kind of monitoring for port 25 out from your network.
Look at the link below (PDF) and see recommendations there.
docs.yahoo.com/docs/pr/pdf/asta_soi.pdf
cheers,
always Face your Fears...
Time to create page: 0.142 seconds