LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 09-30-2008, 01:52 PM   #1
carlosinfl
Senior Member
 
Registered: May 2004
Location: Orlando, FL
Distribution: Arch
Posts: 2,905

Rep: Reputation: 77
Spamhaus Question


As a mail admin, I had a question about how zen.spamhaus.org works? I have it listed on my mail server (Postfix) to reject mail as follows:

reject_rbl_client zen.spamhaus.org,

I was wondering how do I submit a spammers IP to them? My entire domain was spammed from 124.83.200.48 & it appears that zen.spamhaus.org is not aware of them. How can I add them to spamhaus database?

How does this work?
 
Old 10-01-2008, 01:58 AM   #2
Mr. C.
Senior Member
 
Registered: Jun 2008
Posts: 2,529

Rep: Reputation: 63
Carlos,

Zen = SBL + PBL + XBL.


SBL:

Listing Criteria

The criteria for listing IP addresses in the SBL is:

Spam Sources
Sources of unsolicited bulk email sent to Spamhaus Spamtraps or submitted to Spamhaus by trusted 3rd party intelligence.
...

PBL:

Can I nominate IP addresses or ranges for inclusion?

There is no way for third parties to nominate or add IP addresses to the PBL. Only Spamhaus and authorized PBL ISP Accounts can make changes to PBL database listings. ISPs can only make changes within their authorized network ranges.

XBL:

Can I nominate IP addresses or ranges for inclusion?
No. The XBL is an automatic system whose detectors need to receive email (spam, worms, etc.) directly from the IP address so the connection data can be analysed to determine if it's a proxy or virus-spewer. There is no way for third parties to add IP addresses to the XBL.
 
Old 10-01-2008, 08:36 AM   #3
carlosinfl
Senior Member
 
Registered: May 2004
Location: Orlando, FL
Distribution: Arch
Posts: 2,905

Original Poster
Rep: Reputation: 77
So based on that, it appears that there is nothing us mere mortals can do to report spam to zen. Basically just wait for their setup to get spammed and trickle down to us...
 
Old 10-01-2008, 11:31 AM   #4
Mr. C.
Senior Member
 
Registered: Jun 2008
Posts: 2,529

Rep: Reputation: 63
There are things you can do to ignore/block/increase scores from email coming from IP ranges. If you are not sure how, ask away.
 
Old 10-01-2008, 12:47 PM   #5
carlosinfl
Senior Member
 
Registered: May 2004
Location: Orlando, FL
Distribution: Arch
Posts: 2,905

Original Poster
Rep: Reputation: 77
You mean by creating a blacklist file and referencing that as a check in main.cf?
 
Old 10-01-2008, 03:01 PM   #6
Mr. C.
Senior Member
 
Registered: Jun 2008
Posts: 2,529

Rep: Reputation: 63
Either a blacklist, or a score enhancing boost via spamassassin or equivalent. Spam score boosts are safer then outright blacklists in that false positive rejects are reduced.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
spamhaus/cbl keep blocking my ip! efm Linux - Networking 5 01-10-2007 12:40 AM
rblsmtpd & spamhaus.org ziggie216 Linux - General 1 12-19-2005 12:14 PM
Question, Apples Contribution to Open Source + MacOs file structure question Higgy3k Other *NIX 5 07-25-2005 04:23 AM
Not your regular GRUB question - just a short question for a fried MBR!! ziphem Linux - General 3 01-31-2005 01:51 PM
login prompt question & kde scheme question JustinCoyan Slackware 2 06-09-2004 02:02 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 12:40 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration