RE: Re[6]: [Declude.JunkMail] Cutting down on DNS

2009-07-10 Thread Michael Cummins
> There are some advantages to Simple DNS when it comes to 
> integration and replication of an entire server, but I've made up those 
> deficiencies with scripting around the DNSCMD utility in the Windows
Server 
> Resource Kit..

Thanks, Darin!  

I've written scripts using DNSCMD before; I guess I should see what is
involved in RNSYNCing that UCEPROTECT zone for starters.

SimpleDNS seems to come with a handy HTTP interface though; I could write
some custom Cold Fusion Components to manage the whole process.  I already
use a bunch of Cold Fusion scripts to parse DLAnalyzer reports every night
and drop them into SQL.  (DLAnalyzer is fantastic; just thought that should
be said again)

Should I post my notes here, or is this old hat for everyone on this list?

-- Michael Cummins




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re: Re[6]: [Declude.JunkMail] Cutting down on DNS

2009-07-10 Thread Darin Cox
Hi Michael,

I'm using Windows 2003 DNS server as well, and have had no trouble with it 
at all.  There are some advantages to Simple DNS when it comes to 
integration and replication of an entire server, but I've made up those 
deficiencies with scripting around the DNSCMD utility in the Windows Server 
Resource Kit..

As for what server to use, the mail systems seem to perform better with a 
local DNS server for lookup, and we do DNSBL replication onto those servers 
as well.

Darin.


- Original Message - 
From: "Michael Cummins" 
To: 
Sent: Friday, July 10, 2009 4:37 PM
Subject: RE: Re[6]: [Declude.JunkMail] Cutting down on DNS


> Note  that  the  resulting  downoaded file is in RBLDNS format. So you
> would convert it to a standard zone file. What DNS server do you use?

I'm using The MS DNS that comes on 2003 Server.  I have it installed on both
of the SmarterMail/Declude/Sniffer/INVURIBL boxes.

Is that a bad, or a good idea?

> UCEPROTECT is free to replicate locally (HTTP or RSYNC)
> http://www.uceprotect.net/en/index.php?m=6&s=0

Thanks, I'll look into that!

It seems a few people here already do this.  What DNS servers do you use to
do this?  Do you use separate dedicated servers to do this, or do you do it
on your Declude server?

Thanks for the discussion!

-- Michael Cummins




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: Re[6]: [Declude.JunkMail] Cutting down on DNS

2009-07-10 Thread Michael Cummins
> Note  that  the  resulting  downoaded file is in RBLDNS format. So you
> would convert it to a standard zone file. What DNS server do you use?

I'm using The MS DNS that comes on 2003 Server.  I have it installed on both
of the SmarterMail/Declude/Sniffer/INVURIBL boxes.

Is that a bad, or a good idea?

> UCEPROTECT is free to replicate locally (HTTP or RSYNC)
> http://www.uceprotect.net/en/index.php?m=6&s=0

Thanks, I'll look into that!

It seems a few people here already do this.  What DNS servers do you use to
do this?  Do you use separate dedicated servers to do this, or do you do it
on your Declude server? 

Thanks for the discussion!

-- Michael Cummins




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re[6]: [Declude.JunkMail] Cutting down on DNS

2009-07-10 Thread Sanford Whiteman
> ...Declude just does a DNS lookup on the defined server and checks to see if
> it returns an authoritative or non-authoritative response for the host name
> of the e-mail address, and then pass/fails on that?

Yes,  same  way  DSBLs usually work, only when you replicate the zone,
your DNS server is authoritative, so there is no outside lookup.

> I Googled a few of the more useful RBLs on my list. So far, they all
> want you to contact them for pricing. That sounds scary. Does anyone
> know how much this kind of thing usually runs?

UCEPROTECT is free to replicate locally (HTTP or RSYNC)

http://www.uceprotect.net/en/index.php?m=6&s=0

Note  that  the  resulting  downoaded file is in RBLDNS format. So you
would convert it to a standard zone file. What DNS server do you use?

Considering  that  UCEPROTECT  folks say a maximum of 1,000 (!) direct
requests per day are supported, you would be well advised to replicate
this one.

--Sandy




Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: sa...@cypressintegrated.com

SpamAssassin plugs into Declude!
  http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases!
  
http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/
  
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.