Re: [Mimedefang] Can I get MimeDefang to email alert me when a customer server is on an RBL
On Wed, 26 Feb 2014 08:30:35 - "Jon Rowlan" wrote: > It just makes sense for me to RBL check the sending servers because > that is where the problem is and indeed we are finding these sending > servers listed on RBL servers - ours does not seem to get blacklisted. MIMEDefang is written in Perl so of course you can do whatever you want. It even has helper functions for doing RBL lookups, so... go nuts! Regards, David. ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Can I get MimeDefang to email alert me when a customer server is on an RBL
> If the spam is being relayed out through your filter, your IP address is likely to be the one that will get blacklisted. It will > be seen as the source of the spam. You might want to look into rate limiting your customers as well as scanning the messages. To a certain extent that is already being done but these are small emails and they typically go out on a Saturday and even rate limiting still sees a hell of a lot of mail going out. It just makes sense for me to RBL check the sending servers because that is where the problem is and indeed we are finding these sending servers listed on RBL servers - ours does not seem to get blacklisted. One of our ISP's is able to notify us when there is an issue from one of our client ISP's and we jump on and clean up the infection. I'd just like to do the same at my server. jON ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Can I get MimeDefang to email alert me when a customer server is on an RBL
Jon wrote on 02/25/2014 04:15:31 AM: > I use sendmail/md/sa/clam to test for inbound, I actually don't know > whether any checks are performed on the outgoing by this combination of > systems, I would have thought that some check are made on mail going out > as well as in. > The systems relaying are a disparate bunch of customer servers. Windows > mainly. > > Occasionally we find a compromise and have to clean up but I am looking > for ways to clean up far sooner and if possible to fix and block an > impending flood before or as it happens. > > What I realised is that an entry in my Access table that allows relay > though my servers does not check RBL. If the spam is being relayed out through your filter, your IP address is likely to be the one that will get blacklisted. It will be seen as the source of the spam. You might want to look into rate limiting your customers as well as scanning the messages. Confidentiality Notice: This electronic message and any attachments may contain confidential or privileged information, and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agent responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachments. Please notify the sender immediately by return e-mail or telephone and delete this message from your system. ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Can I get MimeDefang to email alert me when a customer server is on an RBL
> Leading question: Do you test outbound email for spam? I use sendmail/md/sa/clam to test for inbound, I actually don't know whether any checks are performed on the outgoing by this combination of systems, I would have thought that some check are made on mail going out as well as in. The systems relaying are a disparate bunch of customer servers. Windows mainly. Occasionally we find a compromise and have to clean up but I am looking for ways to clean up far sooner and if possible to fix and block an impending flood before or as it happens. What I realised is that an entry in my Access table that allows relay though my servers does not check RBL. jON ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Can I get MimeDefang to email alert me when a customer server is on an RBL
On 2/22/2014 4:54 AM, Jon Rowlan wrote: I'd like to get MD to email an alert to postmaster when one of my customer relay servers is featured on an RBL list. I use MD/Clam/SA/Sendmail. Currently if I allow a relay from a customer server, no RBL check is done and it can be some time later that I discover I have been spammed through. Is this possible, I can't see any k/b articles to suggest how I might go about this. There are scripts that I can run to test a bunch of IP's but I would rather this be alerted at the point when a client server wants to relay through mine. Leading question: Do you test outbound email for spam? Regards, KAM ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Can I get MimeDefang to email alert me when a customer server is on an RBL
I'd like to get MD to email an alert to postmaster when one of my customer relay servers is featured on an RBL list. I use MD/Clam/SA/Sendmail. Currently if I allow a relay from a customer server, no RBL check is done and it can be some time later that I discover I have been spammed through. Is this possible, I can't see any k/b articles to suggest how I might go about this. There are scripts that I can run to test a bunch of IP's but I would rather this be alerted at the point when a client server wants to relay through mine. Thanks all, jON ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
