search for: spamhaus

...g what to look at, or what to modify. --- CentOS 5, running BIND 9.3.6 i386 Hardware: P4, 2.8Ghz, 1G memory Sata drives - non mirrored etc. Load is light, usually under 0.1 -- This box is running Postfix as our mail server. BIND (9.3.6) [Latest.] -- Problem: Postfix is doing RBL lookups on zen.spamhaus.org. Everything goes along groovy - but then lookups start failing. Early in the process, we get stuff like this: [We have a "successful" lookup, and then a failure...] --- Apr 14 14:25:05 mail postfix/smtpd[22281]: NOQUEUE: reject: RCPT from bzq-79-183-5-119.red.bezeqint.net[79.183.5.11...

I realize this is slightly off topic, but I've noticed recently that I've been unable to preform RBL lookups using the the zen and sbl spamhaus RBL lists. Currently using Zimbra Collaboration Suite using CentOS 5 I'm seeing logs showing the following output. [root at phantom ~]# cat /var/log/zimbra.log | grep spamhaus Jul 18 13:07:12 phantom postfix/smtpd[27001]: warning: 107.178.203.192.zen.spamhaus.org: RBL lookup error: Host or dom...

Dear All, its a offtopic question but really apprecite if someone would advise n help i have been running a mil server with sendmail and have sbl-xbl.spamhaus.org as my dnsbl. i had other servers which are alredy out now that is relays.ordb.org and dsbl.org have already been out of my sendmail config. any one knows of ny other servers i could add in my sendmail config apprecite ur help thanks regards Fabian -- This message has been scanned f...

Hey Ned, I found this very useful to test that the RBL was working: http://www.spamhaus.org/faq/answers.lasso?section=Spamhaus%20SBL#207 " How do I test my SBL setup? Once you have set up your mail server to use sbl.spamhaus.org (or the preferred zen.spamhaus.org), you can test to see if the SBL blocking is working by sending an email (any email) to: nelson-sbl-test at cryn...

I have enabled the feature in sendmail.mc to check with spamhaus for spammers. However since this block is being made at MTA level, I would like to know is something can be done to obtain statistics of blocked attemps. thanks -- ------------------------------------------------------------ Erick Perez Panama Sistemas Integradores de Telefonia IP y Soluciones...

...r 2020 10:02:56 -0600 >> from localhost [127.0.0.1] >> >> ??? ----- The following addresses had permanent fatal errors ----- >> <sbob at quadratum-braccas.com> >> ???? (reason: 554 5.7.1 Service unavailable; Client host >> [50.243.150.81] blocked using xbl.spamhaus.org.rbl.local; >> https://www.spamhaus >> .org/query/ip/50.243.150.81) > > Is 50.243.150.81 your system's IP address?? If so, as this shows, that > IP is on spamhaus' blacklist of addresses. Thus, your sendmail is > working fine.? Problem is elsewhere. > > a...

...--------- # Restrictions SMTP smtpd_helo_restrictions = reject_unknown_helo_hostname smtpd_sender_restrictions = reject_unknown_sender_domain, check_sender_access hash:/etc/postfix/sender_access smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_rbl_client zen.spamhaus.org, reject_rhsbl_reverse_client dbl.spamhaus.org, reject_rhsbl_helo dbl.spamhaus.org, reject_rhsbl_sender dbl.spamhaus.org smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_data_restrictions = reject_unauth_pipelining --8<--------...

Hi, I'm managing several mail servers running CentOS 7, Postfix and Dovecot. SpamAssassin is filtering mail nicely, but I'm considering using RBL (blacklists) to take some load off the servers. General question to those of you who use RBL. Which lists do you recommend using? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'?glise - 30730 Montpezat Site :

...39;, `relays.ordb.org', `"Spam blocked see: http://ordb.org/lookup/?host="$&amp;{client_addr}')dnl FEATURE(`dnsbl', `cbl.abuseat.org', `"Spam blocked see: http://cbl.abuseat.org/lookup.cgi?ip="$&amp;{client_addr}')dnl FEATURE(`dnsbl', `sbl.spamhaus.org', `"Spam blocked see: http://spamhaus.org/query/bl?ip="$&amp;{client_addr}')dnl FEATURE(`dnsbl', `list.dsbl.org', `"Spam blocked see: http://dsbl.org/listing?"$&amp;{client_addr}')dnl dnl #

...hash:/etc/postfix/sender_access, reject_unknown_sender_domain, reject_unknown_reverse_client_hostname, reject_unknown_client_hostname smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_client_access hash:/etc/postfix/rbl_override, reject_rhsbl_helo dbl.spamhaus.org, reject_rhsbl_reverse_client dbl.spamhaus.org, reject_rhsbl_sender dbl.spamhaus.org, reject_rbl_client zen.spamhaus.org --8<-------------------------------------------------------- Before committing this configuration to my main server, I thought I'd share this configuration on th...

...mAssassin is filtering mail nicely, but I'm considering using RBL >> (blacklists) to take some load off the servers. >> >> General question to those of you who use RBL. Which lists do you >> recommend using? > > The best free blacklist that I'm aware of is zen.spamhaus.org.? I've been using it as > a blacklist on my server for years without any problems. > > More info: https://www.spamhaus.org/zen/ Spmhaus isn't free per se. https://www.spamhaus.org/organization/dnsblusage/ Alexander

...t [127.0.0.1] > >>> > >>> ----- The following addresses had permanent fatal errors ----- > >>> <sbob at quadratum-braccas.com> > >>> (reason: 554 5.7.1 Service unavailable; Client host > >>> [50.243.150.81] blocked using xbl.spamhaus.org.rbl.local; > >>> https://www.spamhaus > >>> .org/query/ip/50.243.150.81) > >> > >> Is 50.243.150.81 your system's IP address? If so, as this shows, that > >> IP is on spamhaus' blacklist of addresses. Thus, your sendmail is > >&g...

...t; >>>>> ----- The following addresses had permanent fatal errors ----- > >>>>> <sbob at quadratum-braccas.com> > >>>>> (reason: 554 5.7.1 Service unavailable; Client host > >>>>> [50.243.150.81] blocked using xbl.spamhaus.org.rbl.local; > >>>>> https://www.spamhaus > >>>>> .org/query/ip/50.243.150.81) > >>>> Is 50.243.150.81 your system's IP address? If so, as this shows, that > >>>> IP is on spamhaus' blacklist of addresses. Thus, your sendm...

...t 1: The original message was received at Sun, 19 Apr 2020 10:02:56 -0600 from localhost [127.0.0.1] ?? ----- The following addresses had permanent fatal errors ----- <sbob at quadratum-braccas.com> ??? (reason: 554 5.7.1 Service unavailable; Client host [50.243.150.81] blocked using xbl.spamhaus.org.rbl.local; https://www.spamhaus .org/query/ip/50.243.150.81) ?? ----- Transcript of session follows ----- ... while talking to in1-smtp.messagingengine.com.: >>> RCPT To:<sbob at quadratum-braccas.com> <<< 554 5.7.1 Service unavailable; Client host [50.243.150.81] blo...

Hi, I'm not sure what the policy of this list is and I bet everyone has a spam filter, so nobody might have noticed, but we got spammed. Can anyone send mail to the list or do you have to subscribe first ? -- dag wieers, dag@wieers.com, http://dag.wieers.com/ -- [all I want is a warm bed and a kind word and unlimited power]

...n fact seem to stop many of the slamming spambots sort of like the design of milter-greylist. Except, I don't have to send a temp fail. So, this is a good thing. The negative is it also takes longer for my users to send mail as it is processed the same way during outgoing. Also, we run the SpamHaus blacklist. This works pretty good for inbound, but from time to time one of our hosting clients winds up on the blocklist because they are on a dynamic IP and someone else has recently used it for spamming. One could argue that my client should then go remove their IP from the blacklist to bett...

...; >> Especially considering the ridiculous response I received from >> Amazon. (Basically told me to submit host, destination, port, proto, >> and log... which of course was already included in the original >> complaint) > > I don't think anyone else brought up the Spamhaus DROP project. ?It's a > blacklist of IP addresses and address ranges which are known to ONLY be > used for malicious purposes. > > http://www.spamhaus.org/drop/ > > We could establish something similar to that for VOIP attacks. ?It may > not be exactly a trivial system to m...

...----- The following addresses had permanent fatal errors ----- > >>>>>>> <sbob at quadratum-braccas.com> > >>>>>>> (reason: 554 5.7.1 Service unavailable; Client host > >>>>>>> [50.243.150.81] blocked using xbl.spamhaus.org.rbl.local; > >>>>>>> https://www.spamhaus > >>>>>>> .org/query/ip/50.243.150.81) > >>>>>> Is 50.243.150.81 your system's IP address? If so, as this shows, that > >>>>>> IP is on spamhaus' blacklis...

...s. Are you > using a dynamic IP address? You may have a mis-configured server that is > allowing spammers to relay through your server. Another possibility is > your system is compromised with a spambot. > > Mike > Happens frequently to me and I'm no open relay. CentOS uses spamhaus and spamhaus blocks entire subnets if someone on the subnet spams. So unless you can afford your own subnet or pay to be on a whitelist, blacklists are a common thing for the little guy. So much for net neutrality.

...re: x86_64 OS: other Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: netfilter at d9c.eu System: Archlinux, nft 0.6, linux 4.7.6 >table inet filter { > set spamhaus { > type ipv4_addr > flags interval > } >... >$ nft add element inet filter spamhaus { 1.2.3.4 comment \"test\" } >$nft list set inet filter spamhaus table inet filter { set spamhaus { type ipv4_addr...