Print Page | Close Window

dnsrbl.net is blocking valid emails

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6587
Printed Date: 10 December 2017 at 9:03pm


Topic: dnsrbl.net is blocking valid emails
Posted By: LogSat
Subject: dnsrbl.net is blocking valid emails
Date Posted: 30 November 2008 at 2:49pm
We are seing a LOT of valid rejected emails being blocked by the spam.dnsrbl.net and dun.dnsrbl.net RBL blacklists. It appears that the owners of these lists are blocking all IPs even if they are valid.

We strongly recommend admins to remove any entries referencing any of the domains *.dnsrbl.net from the MAPS RBL servers in SpamFilter's blacklist settings.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP



Replies:
Posted By: nejko
Date Posted: 01 December 2008 at 2:48am
Same here (UTC+1). This morning we have already noticed that two servers of our clients are rejecting legitimate e-mail.


Posted By: Wayne
Date Posted: 01 December 2008 at 8:15am
Same here, anybody knows what happens?

-------------
SF4.5.0.1-beta


Posted By: Berno
Date Posted: 01 December 2008 at 11:02am
Yeah, thanks for posting this. I had a couple people say that they had some longtime emailers getting blocked.  started checking the log and found that almost everyone that emails our company (that wasn't on the Excluded list) was getting rejected...same culprit.
 
Not good! Ouch


Posted By: robj
Date Posted: 01 December 2008 at 11:21am
Same here.  I remove it.
 
This is what I have now...is this all I need.
bl.spamcop.net, true
sbl.spamhaus.org, true
dnsbl.njabl.org, true
 
Thanks,
Rob


Posted By: Wayne
Date Posted: 01 December 2008 at 11:26am
Rob, yes this are the most important three. I also have an entry with dnsbl.sorbs.net and instead of sbl, the zen.spamhaus.org

Regards Wayne

-------------
SF4.5.0.1-beta


Posted By: swaber
Date Posted: 01 December 2008 at 1:13pm

I have sbl-xbl.spamhaus.org instead of sbl.spamhaus.org, which entry is valid or better? Perhaps we could get a current list of the recommended providers from LogStat, there seems to have been some drifting of the list over the various versions.



Posted By: Wayne
Date Posted: 02 December 2008 at 8:59am
Swaber

Read http://www.dnsbl.com/2007/10/spamhaus-zen.html - this

zen.spamhaus.org is a combination of SBL, XBL, PBL lists. If you are using the ZEN list, you do not need to also use the other lists individually.


-------------
SF4.5.0.1-beta


Posted By: jerbo128
Date Posted: 04 December 2008 at 7:30pm
 I am using:
MAPS: 
zen.spamhaus.org,true
bl.spamcop.net,true
dnsbl-2.uceprotect.net,true
 
SURBL:
black.uribl.com
multi.surbl.org
zen.spamhaus.org
 
I would be intersted in anyone else's opinion and what you are using....
 
Jeremy


Posted By: charles.steve
Date Posted: 05 December 2008 at 6:38am
Hi Everybody

I am Charles, new to this forum. Will anybody tell me of what about your are talking?



Charles


-------------
CompTIA http://www.testking.net/testking-N10-003.htm - N10-003 and Microsoft http://www.testking.net/testking-70-270.htm - 70-270 : MCSE Windows XP Professional exam.


Posted By: Desperado
Date Posted: 05 December 2008 at 9:59am
Jeremy,
 
Is that correct?  You are using spamhaus as a SURBL filter?  I did not know that was an option for Spamhaus.


-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com



Posted By: jerbo128
Date Posted: 05 December 2008 at 1:10pm
Yes Dan.  At least from what I understand.
 
Check out this page:
http://www.spamhaus.org/sbl/howtouse.html - http://www.spamhaus.org/sbl/howtouse.html
********************************************
"Not just for connection queries...

In addition to checking the IPs of the connecting servers against the SBL, you can significantly boost your spam catch rate by also scanning the email body of any mails that get past SBL/XBL looking for host names of URLs (web sites) advertised in spams, and checking the IPs of those hosts, and their names servers, against the SBL. This is because the SBL lists the IPs of spammers' websites in addition to their mail servers."
************************************************
 
Jeremy
 
 
 
 
 


Posted By: suchi
Date Posted: 08 December 2008 at 4:45am
Hey same here.
Getting lot of valid mails rejected because of this spam.dnsrbl.net and dun.dnsrbl.net.
For solution purpose,have removed it from MAPS server list.
But what is the reason behind this rejection ??


Posted By: LogSat
Date Posted: 08 December 2008 at 10:06pm
The owners of the domains (or the DNS for that domain) dnsrbl.net decided to output the response "127.0.0.1" to all DNS queries made for *any* name in their DNS space. When it comes to RBL blacklists, the 127.0.0.nnn response is used to indicate that an IP is listed in the blacklist. This thus caused every single IP on the internet to be reported as being blacklisted.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP



Print Page | Close Window