Hi Brandon, You might post your Declude Config file without the license code. Info on what the server problem was my provide insight as well
Best, Darin. From: Brandon Rowlett Sent: Tuesday, July 15, 2014 8:45 AM To: [email protected] Subject: [MBF] Declude help We had a major issue with one of our mail servers last week and now I have just about all clients on the server letting me know that their spam has increased 10 fold but we did not change anything. I do notice in the log that I get the following on just about every other mail: 07/15/2014 08:40:33.508 q663c0001339a020e.smd Test #17 [MAILSPIKE-L5] is same as Test #17 [MAILSPIKE-L5=127.0.0.10]. Answer=? 07/15/2014 08:40:33.508 q663c0001339a020e.smd Test #17 [MAILSPIKE-L5] is same as Test #18 [MAILSPIKE-L4=127.0.0.11]. Answer=? 07/15/2014 08:40:33.508 q663c0001339a020e.smd Test #17 [MAILSPIKE-L5] is same as Test #19 [MAILSPIKE-L3=127.0.0.12]. Answer=? 07/15/2014 08:40:33.508 q663c0001339a020e.smd Test #17 [MAILSPIKE-L5] is same as Test #20 [MAILSPIKE-L2=127.0.0.13]. Answer=? 07/15/2014 08:40:33.508 q663c0001339a020e.smd Test #17 [MAILSPIKE-L5] is same as Test #21 [MAILSPIKE-L1=127.0.0.14]. Answer=? 07/15/2014 08:40:33.508 q663c0001339a020e.smd Test #17 [MAILSPIKE-L5] is same as Test #22 [MAILSPIKE-H1=127.0.0.16]. Answer=? 07/15/2014 08:40:33.508 q663c0001339a020e.smd Test #17 [MAILSPIKE-L5] is same as Test #23 [MAILSPIKE-H2=127.0.0.17]. Answer=? 07/15/2014 08:40:33.508 q663c0001339a020e.smd Test #17 [MAILSPIKE-L5] is same as Test #24 [MAILSPIKE-H3=127.0.0.18]. Answer=? 07/15/2014 08:40:33.508 q663c0001339a020e.smd Test #17 [MAILSPIKE-L5] is same as Test #25 [MAILSPIKE-H4=127.0.0.19]. Answer=? 07/15/2014 08:40:33.508 q663c0001339a020e.smd Test #17 [MAILSPIKE-L5] is same as Test #26 [MAILSPIKE-H5=127.0.0.20]. Answer=? The rest of my tests look to be returning answers so I don’t know that I have a DNS lookup issue but something has definitely changed since I had the server problem last Thursday: 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #8 [AHBL] is same as Test #8 [AHBL=*]. Answer=? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #9 [BARRACUDA] is same as Test #9 [BARRACUDA=127.0.0.2]. Answer=? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #10 [BACKSCATTER] is same as Test #10 [BACKSCATTER=127.0.0.2]. Answer=blacklistmaster.backscatterer.org.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #12 [GBUDB] is same as Test #12 [GBUDB=127.0.0.2]. Answer=hostmaster.gbudb.net.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #13 [HOSTKARMA-BLACK] is same as Test #13 [HOSTKARMA-BLACK=127.0.0.2]. Answer=127.0.0.1? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #13 [HOSTKARMA-BLACK] is same as Test #13 [HOSTKARMA-BLACK]. Answer=127.0.0.1 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #13 [HOSTKARMA-BLACK] is same as Test #13 [HOSTKARMA-BLACK]. Answer=127.0.1.1 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #14 [HOSTKARMA-YELLOW] is same as Test #14 [HOSTKARMA-YELLOW=127.0.0.3]. Answer=127.0.4.2? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #14 [HOSTKARMA-YELLOW] is same as Test #14 [HOSTKARMA-YELLOW]. Answer=127.0.4.2 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #16 [MCAFEE] is same as Test #16 [MCAFEE=*]. Answer=admin.bl.mcafee.com.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #27 [MSRBL] is same as Test #27 [MSRBL=127.0.0.2]. Answer=dns.cameldns.com.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #28 [SEM-BS] is same as Test #28 [SEM-BS=*]. Answer=zoneadmin.spameatingmonkey.com.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #29 [SEM-BL] is same as Test #29 [SEM-BL=*]. Answer=zoneadmin.spameatingmonkey.com.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #30 [SENDERSCORE] is same as Test #30 [SENDERSCORE=127.0.0.6]. Answer=dnsadmin.rnbl.net.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #32 [SORBS-NEW] is same as Test #32 [SORBS-NEW=127.0.0.6]. Answer=dns.isux.com.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #34 [SORBS-NOMAIL] is same as Test #34 [SORBS-NOMAIL=127.0.0.12]. Answer=dns.isux.com.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #35 [SPAMCOP] is same as Test #35 [SPAMCOP=127.0.0.2]. Answer=hostmaster.admin.spamcop.net.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #37 [SURRIEL] is same as Test #37 [SURRIEL=*]. Answer=root.rbldnsd.surriel.com.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #38 [UBL] is same as Test #38 [UBL=127.0.0.2]. Answer=hostmaster.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #39 [UCEPROTECT-1] is same as Test #39 [UCEPROTECT-1=127.0.0.2]. Answer=sonderlocke.fast9.uceprotect.net.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #40 [UCEPROTECT-2] is same as Test #40 [UCEPROTECT-2=127.0.0.2]. Answer=sonderlocke.fast9.uceprotect.net.? 07/15/2014 08:40:39.695 q7eda000134080164.smd Test #41 [UCEPROTECT-3] is same as Test #41 [UCEPROTECT-3=127.0.0.2]. Answer=sonderlocke.fast9.uceprotect.net.? 07/15/2014 08:40:39.805 q7eda000134080164.smd Test #6 [SORBS-DUL] is same as Test #6 [SORBS-DUL=127.0.0.10]. Answer=dns.isux.com.? 07/15/2014 08:40:39.805 q7eda000134080164.smd Test #6 [SORBS-DUL] is same as Test #31 [SORBS=*]. Answer=dns.isux.com.? 07/15/2014 08:40:39.805 q7eda000134080164.smd Test #7 [RU-DUL] is same as Test #7 [RU-DUL=127.0.0.2]. Answer=postmaster.demos.su.? 07/15/2014 08:40:39.805 q7eda000134080164.smd Test #11 [CBL] is same as Test #11 [CBL=127.0.0.2]. Answer=? 07/15/2014 08:40:39.805 q7eda000134080164.smd Test #15 [IX] is same as Test #15 [IX=127.0.0.2]. Answer=support.ix-lab.de.? It seems to always be Test #17 do any of you guys know what this means? Thanks, Brandon -------------------------------------------------------------------------------- CONFIDENTIALITY NOTICE: This message, and any attachments, contains information which may be confidential and privileged. Unless you are the intended recipient (or authorized to receive this message for the intended recipient), you may not use, copy, disseminate or disclose to anyone the message or any information contained in the message. Any opinions or views expressed which are of a personal nature are not necessarily those of the company. The company reserves the right to monitor all e-mail communications.
