CentOS - Mar 2010 - how to monitor,or be notified of email blacklisting ?

Hi,

Does anyone know how I can monitor our server's for blacklisting? We
run a large amount of shared hosting & reseller hosting servers and
from time to time one of the IP's will get blacklisted. I'm looking
for a way to be notified if any of our IP's get blacklisted. Is this
possible?

-- 
Kind Regards
Rudi Ahlers
SoftDux

Website: http://www.SoftDux.com
Technical Blog: http://Blog.SoftDux.com
Office: 087 805 9573
Cell: 082 554 7532

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

thus Rudi Ahlers spake:
> Hi,
> 
> Does anyone know how I can monitor our server's for blacklisting? We
> run a large amount of shared hosting & reseller hosting servers and
> from time to time one of the IP's will get blacklisted. I'm looking
> for a way to be notified if any of our IP's get blacklisted. Is this
> possible?
Hi,

do you run nagios? I have a script running here to get notified in case
we're blacklisted.

The German ``iX Magazin'' (focused on Unix) had some nice stuff, too:

http://www.heise.de/netze/artikel/Verdrehte-Abfrage-223890.html

The article itself is in german, the scripts are not. You can run the
one mentioned (URL above) as a cron job and receive an email in case
you're blacklisted somewhere.

Maybe this is a good start.

HTH,

Timo


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFLmjLTfg746kcGBOwRAojZAKCxAJB14QMtzEHTbc4jqHNcIA4t/gCfeDSV
wq/8SLym4+6qCARqoYXbqFI=rZcM
-----END PGP SIGNATURE-----

Rudi Ahlers wrote:
> Hi,
> 
> Does anyone know how I can monitor our server's for blacklisting? We
> run a large amount of shared hosting & reseller hosting servers and
> from time to time one of the IP's will get blacklisted. I'm looking
> for a way to be notified if any of our IP's get blacklisted. Is this
> possible?
> 

You could manually check your IP address(es) here:

http://www.dnsbl.info/

Alternatively, just read your logs (or write a simple script to parse 
them for you). You'll receive a 5xx rejection and usually a reason/URL 
from the main blacklists whenever you are blocked.

If you're using postfix as your MTA, check out pflogsumm.

On 03/12/2010 04:19 AM, Rudi Ahlers wrote:
> Does anyone know how I can monitor our server's for blacklisting? We
> run a large amount of shared hosting&  reseller hosting servers and
> from time to time one of the IP's will get blacklisted. I'm looking
> for a way to be notified if any of our IP's get blacklisted. Is this
> possible?
>
>    
get yourself registered on feedback loops.  aol, comcast, earthlink, 
usa.net, and maybe some others offer this.  then you'll get copies of 
email they consider to be spam.  by using them as early warning systems, 
you can avoid getting on the blacklist in the first place.  also, make 
sure you have a valid email address set on your ip whois info so that 
abuse messages can get to you.  get registered with abuse.net.  
basically do as much as you can so that you're aware of what complaints 
are being generated and can shut off abusers more quickly.

robtex.com is a good site to use to check for blacklist entries.  you 
might be able to run a wget via cron to watch things daily.