Topic: Email WBL/DNSBL managing

[steve288]

I have SME 7.4
Currently we use the SME computer to filter our Exchange mail. It works well.

However we have found one person (that we know of) that cannot send us mail it bounces back. When we looked at the reasons given it was due to the fact that our site was listed on a spam bock list.

Ok So we removed our name from that list. Strangely the IP that was listed was our OLD (over two years ago) Ip that is not ours now.

Anyway the end user still cant email us, same reason.

We then disabled Email WBL/DNSBL Status and his mail is now getting through.

I have a few specific questions regarding this.

1. How can I remove from our computer DNSBL the site “ dnsbl-1.uceprotect.net Conservative (blocks single IPs) “?

The site we were listed in was uceprotect.net So I assume that it is this site that is doing it.
(is there a way of listing the current sites being used)

2. How often are these lists updated maybe I just need to update the list, now that we are not in it?

3. Why is it that others mail seems to be getting through but this one persons (ok maybe there are others but no one else has called and we are getting other email)?

4. Is there some way we can add the address say its 123.123.123.123 to our own personal lists that would over let this persons mail though?

5. Im a little confused by this whole thing. I mean really its seems that it is revers to my thinking. Shouldn’t dnsbl be stopping my end users email because HIS email is on a BL not mine. (being that turning off the DNSBL allows us to get the mail I asume we are stopping his email)

I recognise that each one of these questions may be differing options but I would really like to have them all answered so I can choose my poison. Eg I suppose first I would try to update the list to the current list to see if that fixes it and then work along the list to see what resolves it.

Oh by the way the user is in our whitelist.

Thanks as always.

[cactus]

Although the message is in German the pointers in this message I wrote yesterday should get you started:
http://forums.contribs.org/index.php/topic,45480.msg221012.html#msg221012

[steve288]

Cactus - Danke

You have moved me along, danke. I have read over the links.

Just to get my thinking right. Now my <config show qpsmtpd> list looks like this.

RBLList=bl.spamcop.net:combined.njabl.org:dnsbl.ahbl.org:dnsbl-1.uceprotect.net:dnsbl-2.uceprotect.net:list.dsbl.org:multihop.dsbl.org:psbl.surriel.com:zen.spamhaus.org

How would I remove the <dnsbl-1.uceprotect.net:dnsbl-2.uceprotect.net> . Sites.
Do I just run the command;

<config setprop qpsmtpd RBLList bl.spamcop.net,combined.njabl.org,dnsbl.ahbl.org,list.dsbl.org,multihop.dsbl.org,psbl.surriel.com,zen.spamhaus.org>
<signal-event email-update>

IN OTHER WORDS run the above command WITHOUT the sites that I don’t want to include and then it will just overwrite the old configuration, removing the previous sites.

Does anyone know how to see what version of lists is being used. In other words If it was updated yesterday or last week?

And how to manually update it now?

Despite the fact that we are are not in the list now, I want to see if we are still in our dnsbl files I asume the only way to do that is update the files and then send an email and see if it bounces.

Thanks.

[cactus]

How would I remove the <dnsbl-1.uceprotect.net:dnsbl-2.uceprotect.net> . Sites.
Do I just run the command;

<config setprop qpsmtpd RBLList bl.spamcop.net,combined.njabl.org,dnsbl.ahbl.org,list.dsbl.org,multihop.dsbl.org,psbl.surriel.com,zen.spamhaus.org>
<signal-event email-update>

IN OTHER WORDS run the above command WITHOUT the sites that I don’t want to include and then it will just overwrite the old configuration, removing the previous sites.

Yes:

Code: [Select]

config setprop qpsmtpd RBLList bl.spamcop.net,combined.njabl.org,dnsbl.ahbl.org,list.dsbl.org,multihop.dsbl.org,psbl.surriel.com,zen.spamhaus.org
signal-event email-update


Does anyone know how to see what version of lists is being used. In other words If it was updated yesterday or last week?

Those lists are not downloaded but checked online every time you receive a inbound connection to your mail server IIRC.

And how to manually update it now?

You can't and do not need to IIRC.

Despite the fact that we are are not in the list now, I want to see if we are still in our dnsbl files I asume the only way to do that is update the files and then send an email and see if it bounces.

Most of the times such sites provide a list of currently listed IP/hostnames.

[janet]

steve288

Why don't you read available articles eg
http://wiki.contribs.org/Spam_blocking_tutorial
and
http://wiki.contribs.org/SME_Server:Documentation:FAQ#Spam
and
http://wiki.contribs.org/Updating_to_SME_7.2#RHSBL_Servers
and
http://wiki.contribs.org/Updating_to_SME_7.2#DNSBL_Servers

PLEASE read the FAQ and Howtos and Manual, all your questions were answered there.

[shawnbishop]

Great, this was very helpful...