DNS Lookups

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

DNS Lookups

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Web & Mail Security] >> GFI MailEssentials >> DNS Lookups

Page: [1]

Message

<< Older Topic Newer Topic >>

DNS Lookups - 6.Jul.2009 6:17:59 PM

skoning

Posts: 8
Joined: 15.Sep.2004
Status: offline

Knowledgebase Article 1770 (KBID001770) describes a number of places where ME performs a DNS lookup (DNS blacklists; verify valid sender domain; SPF; and SURBL). Two of these provide for a list of items to be tested - DNS Blacklist and SURBL.

Is there a list somewhere of the recommended items to be included in these lists? At the moment, I have four items in the DNS Blacklist check (bl.spamcop.net; sbl-xbl.spamhaus.org; sbl.spamhaus.org; and xbl.spamhaus.org) and one in the SURBL check (multi.surbl.org). Should some of these be disabled? Should others be added? How does one decide?

Post #: 1

RE: DNS Lookups - 7.Jul.2009 4:16:23 AM

RSP

Posts: 1270
Joined: 31.Oct.2006
From: The East Riding of Yorkshire, UK
Status: offline

You will need to research which lists to include; there are no recommended lists as everyone's experience of spam / ham is slightly different.

The sbl-xbl.spamhaus.org includes both sbl and xbl, so those others are redundant and can be removed. It's advised that no more than 3 are selected otherwise delays in the system might be seen.

However, if you want a starting point, I list the following. These may produce false positives for you or false negatives or may not be operating any more, so be warned.
DNS Blacklists:
zen.spamhaus.org
new.spam.dnsbl.sorbs.net
combined.njabl.org
bl.spamcop.net

URI Blocklists:
multi.surbl.org
multi.uribl.org

_____________________________

Disclaimer: I don't work for GFI, I just use their products.

(in reply to skoning)

Post #: 2