Results 1 to 6 of 6

Thread: Disabling dnsbl replies

  1. #1
    Join Date
    Jun 2009
    Posts
    49
    Rep Power
    6

    Default Disabling dnsbl replies

    Hello,

    I want to disable zimbra from sending blocked messages email that has been blocked by dnsbl.

    My mail server is being flagged for spamming and I think this might be the cause.

    How do I disable this?

    Thanks

  2. #2
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by mutuku View Post
    I want to disable zimbra from sending blocked messages email that has been blocked by dnsbl.
    Who is it sending the email to?

    Quote Originally Posted by mutuku View Post
    My mail server is being flagged for spamming and I think this might be the cause.
    That's not likely to be the reason you're listed and you haven't said what investigation you've done into why you're actually on a blacklist.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    Join Date
    Jun 2009
    Posts
    49
    Rep Power
    6

    Default

    If Someone sends mail to my mail server and they are blocked during dnsbl checks, they(the sender) get an error( e.g host
    [X.X.X.X] blocked using dnsbl.sorbs.net; Exploitable Server See:
    SORBS Database Lookup
    ), X.X.X.X being the IP of the sneders mail server.

    the resason I am on the black list is this 41.215.35.14 | Mail Server | Dictionary Attacker | IP Address Inspector | Project Honey Pot.

    I have checked the zimbra logs and there are no traces of the said mail. My server is not an open relay.

  4. #4
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by mutuku View Post
    If Someone sends mail to my mail server and they are blocked during dnsbl checks, they(the sender) get an error( e.g host
    [X.X.X.X] blocked using dnsbl.sorbs.net; Exploitable Server See:
    SORBS Database Lookup
    ), X.X.X.X being the IP of the sneders mail server.
    That is not an email, it's a response to the sender being blocked and shouldn't cause you any problems with being listed as a spam source.

    Quote Originally Posted by mutuku View Post
    the resason I am on the black list is this 41.215.35.14 | Mail Server | Dictionary Attacker | IP Address Inspector | Project Honey Pot.

    I have checked the zimbra logs and there are no traces of the said mail. My server is not an open relay.
    You wouldn't see the subject in your log files, you need to see if any of your users are sending unusual levels of email. You should also check your audit log to see if there's any unusual activity in there.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  5. #5
    Join Date
    Jun 2009
    Posts
    49
    Rep Power
    6

    Default

    Audit.log seems ok. Only users who have account are authenticating

    On sending of emails, the daily mail reports send to admin@mydomain are a bit confusing. Under "Most active senders", there are email addresses that are not from my domain. Same issue under "Most active recipients". Is this normal?

  6. #6
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by mutuku View Post
    Audit.log seems ok. Only users who have account are authenticating

    On sending of emails, the daily mail reports send to admin@mydomain are a bit confusing. Under "Most active senders", there are email addresses that are not from my domain. Same issue under "Most active recipients". Is this normal?
    Yes it's normal, they are the 'most active' and they include email received at your server.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Similar Threads

  1. My server has stopped querying DNSBL. Help!
    By slacri in forum Administrators
    Replies: 7
    Last Post: 06-01-2010, 08:10 AM
  2. Allowing some mail to pass through dnsbl checks
    By mutuku in forum Administrators
    Replies: 1
    Last Post: 03-25-2010, 12:32 PM
  3. Replies: 0
    Last Post: 06-30-2009, 11:19 AM
  4. DNSBL with weight instead of block
    By Tenchi in forum Administrators
    Replies: 1
    Last Post: 05-19-2009, 05:28 AM
  5. DNSBL behind mail relay?
    By krag in forum Administrators
    Replies: 0
    Last Post: 08-21-2008, 10:43 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •