Or that SpamTitan's "Use DNS Cache" option has been turned off. Cheers,
Phil -- Phil Randal | Infrastructure Engineer NHS Herefordshire & Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 -----Original Message----- From: Steve Hart [mailto:sh...@wrightbg.com] Sent: 20 January 2011 16:39 To: MS-Exchange Admin Issues Subject: RE: anti-spam DNS requests It might be that SpamTitan caches DNS entries for a shorter time than Windows. Steve Hart Network Administrator 503.491.4343 -Direct | 503.492.8160 - Fax -----Original Message----- From: Osborne, Richard [mailto:richard.osbo...@wth.org] Sent: Thursday, January 20, 2011 8:37 AM To: MS-Exchange Admin Issues Subject: RE: anti-spam DNS requests Our previous Windows-based anti-spam queried the same 3 RBLs, so I don't understand the increase. -----Original Message----- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Thursday, January 20, 2011 10:31 AM To: MS-Exchange Admin Issues Subject: RE: anti-spam DNS requests Spamtitan, like many open-source based appliances, queries a bunch of RBLs, like SURBL, Spamhaus, etc. Look at what RBLs are listed, there's going to be a bunch of lookups. I am not surprised that you saw a jump. Alex Alex Eckelberry General Manager, Security Business Unit GFI Software, Inc. (formerly Sunbelt Software) 33 N. Garden Avenue, Clearwater, FL 33755 p: 919-297-1347 f: 727-562-5199 e: al...@gfi.com MSN: alex...@hotmail.com Skype: alexeckelberry oovoo: alexeck w: www.sunbeltsoftware.com b: www.sunbeltblog.com -----Original Message----- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Thursday, January 20, 2011 11:07 AM To: MS-Exchange Admin Issues Subject: RE: anti-spam DNS requests Maybe it queries more RBLs, maybe it does root hint lookups rather than forwarders, it could be a lot of things depending on how it's configured vs. the old product. Paul -----Original Message----- From: Osborne, Richard [mailto:richard.osbo...@wth.org] Sent: 20 January 2011 16:03 To: MS-Exchange Admin Issues Subject: anti-spam DNS requests Our anti-spam solution sits behind our firewall with the necessary ports open to the Internet. We recently changed from a Windows-based (Symantec Mail Security) to a Linux-based (SpamTitan) anti-spam system. My firewall guy is concerned that the number of DNS connections on the firewall (Checkpoint Firewall-1) has more than doubled. We saw the same behavior when we demo'ed Untangle (also Linux-based). Both anti-spam solutions use RBL's, so of course there will be a lot of DNS requests. Any ideas why the number has grown so much higher and whether it should be a concern? Should we just move our anti-spam server outside the firewall? Thanks. Richard Osborne Information Systems Jackson-Madison County General Hospital NOTICE: (1) The foregoing is not intended to be a legally binding or legally effective electronic signature. (2) This message may contain legally privileged or confidential information. If you are not the intended recipient of this message, please so notify me, disregard the foregoing message, and delete the message immediately. I apologize for any inconvenience this may have caused. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist -- MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
