Hi

sbs 2003 standard.

I have set RBLs in Exchange 2003 using sbl.spamhaus.org. How do I get to
know which and how many messages have been blocked as spam and if I need to
restore a false flag spam message how do I do it?

Many Thanks

Regards

Hi Russ

Many thanks. Do I need to enable IMF in addition to RBLs as well?

Thanks

Regards

"Russ SBITS.Biz [SBS-MVP]" <russ@newsgroup> wrote in message
news:C4BAEA46-5196-4DE6-AB7F-AC95169207DD@newsgroup

> use zen.spamhaus.org instead it is more comprehensive
> and includes the other..
> and since it BLOCKS the message before it gets to the server
> there is no flag sets.
> The message never get's delivered it gets bounced.
>
> But don't worry it works fine...
>
> You will since this is exchange 2003 need to set up your smtp gateway
> These are old instructions and the RBL's are old but the instructions are
> correct besides that
> http://www.spamblogging.com/archives/000138.html
>
> Russ
>
> --
> Russell Grover - SBITS.Biz [SBS-MVP]
> MCP, MCPS, MCNPS, SBSC
> Small Business Server/Computer Support - www.SBITS.Biz
> Question or Second Opinion - www.PersonalITConsultant.com
> BPOS - Microsoft Online Services - www.Microsoft-Online-Services.com
> Twitter http://www.twitter.com/SBITSdotBiz
>
> "John" <info@newsgroup> wrote in message
> news:e0InV9iyKHA.4752@newsgroup

>> Hi
>>
>> sbs 2003 standard.
>>
>> I have set RBLs in Exchange 2003 using sbl.spamhaus.org. How do I get to
>> know which and how many messages have been blocked as spam and if I need
>> to restore a false flag spam message how do I do it?
>>
>> Many Thanks
>>
>> Regards
>>
>>

"Russ SBITS.Biz [SBS-MVP]" <russ@newsgroup> wrote in message news:4DADE8BA-0FF6-4DA2-A441-78B6B5F3DC36@newsgroup

> OOPS You beat me again Ace
> Russ
>
> --
> Russell Grover - SBITS.Biz [SBS-MVP]
> MCP, MCPS, MCNPS, SBSC
> Small Business Server/Computer Support - www.SBITS.Biz
> Question or Second Opinion - www.PersonalITConsultant.com
> BPOS - Microsoft Online Services - www.Microsoft-Online-Services.com
> Twitter http://www.twitter.com/SBITSdotBiz
>

Sorry!! :-)


Ace

"John" <info@newsgroup> wrote in message news:%23nSEYwmyKHA.2436@newsgroup

After you set the RBLs, and other settings in the Global section, such as SCL settings, etc, you have to go into Protocols/SMTP/VS1, general tab, Advanced, check the boxes off to activate/enable everything. Then restart the SMTP service (Services MMC).

Are you familiar with the other settings?

Ace

> Hi Russ
>
> Many thanks. Do I need to enable IMF in addition to RBLs as well?
>
> Thanks
>
> Regards
>
> "Russ SBITS.Biz [SBS-MVP]" <russ@newsgroup> wrote in message
> news:C4BAEA46-5196-4DE6-AB7F-AC95169207DD@newsgroup

>> use zen.spamhaus.org instead it is more comprehensive
>> and includes the other..
>> and since it BLOCKS the message before it gets to the server
>> there is no flag sets.
>> The message never get's delivered it gets bounced.
>>
>> But don't worry it works fine...
>>
>> You will since this is exchange 2003 need to set up your smtp gateway
>> These are old instructions and the RBL's are old but the instructions are
>> correct besides that
>> http://www.spamblogging.com/archives/000138.html
>>
>> Russ
>>
>> --
>> Russell Grover - SBITS.Biz [SBS-MVP]
>> MCP, MCPS, MCNPS, SBSC
>> Small Business Server/Computer Support - www.SBITS.Biz
>> Question or Second Opinion - www.PersonalITConsultant.com
>> BPOS - Microsoft Online Services - www.Microsoft-Online-Services.com
>> Twitter http://www.twitter.com/SBITSdotBiz
>>
>> "John" <info@newsgroup> wrote in message
>> news:e0InV9iyKHA.4752@newsgroup

>>> Hi
>>>
>>> sbs 2003 standard.
>>>
>>> I have set RBLs in Exchange 2003 using sbl.spamhaus.org. How do I get to
>>> know which and how many messages have been blocked as spam and if I need
>>> to restore a false flag spam message how do I do it?
>>>
>>> Many Thanks
>>>
>>> Regards
>>>
>>>

>
>

Hi Ace

Thanks. Know and done as much as this article;

http://www.spamblogging.com/archives/000138.html

Many Thanks

Regards

"Ace Fekay [MVP-DS, MCT]" <aceman@newsgroup> wrote in message
news:%23pwyGZpyKHA.5036@newsgroup
"John" <info@newsgroup> wrote in message
news:%23nSEYwmyKHA.2436@newsgroup

After you set the RBLs, and other settings in the Global section, such as
SCL settings, etc, you have to go into Protocols/SMTP/VS1, general tab,
Advanced, check the boxes off to activate/enable everything. Then restart
the SMTP service (Services MMC).

Are you familiar with the other settings?

Ace

> Hi Russ
>
> Many thanks. Do I need to enable IMF in addition to RBLs as well?
>
> Thanks
>
> Regards
>
> "Russ SBITS.Biz [SBS-MVP]" <russ@newsgroup> wrote in message
> news:C4BAEA46-5196-4DE6-AB7F-AC95169207DD@newsgroup

>> use zen.spamhaus.org instead it is more comprehensive
>> and includes the other..
>> and since it BLOCKS the message before it gets to the server
>> there is no flag sets.
>> The message never get's delivered it gets bounced.
>>
>> But don't worry it works fine...
>>
>> You will since this is exchange 2003 need to set up your smtp gateway
>> These are old instructions and the RBL's are old but the instructions are
>> correct besides that
>> http://www.spamblogging.com/archives/000138.html
>>
>> Russ
>>
>> --
>> Russell Grover - SBITS.Biz [SBS-MVP]
>> MCP, MCPS, MCNPS, SBSC
>> Small Business Server/Computer Support - www.SBITS.Biz
>> Question or Second Opinion - www.PersonalITConsultant.com
>> BPOS - Microsoft Online Services - www.Microsoft-Online-Services.com
>> Twitter http://www.twitter.com/SBITSdotBiz
>>
>> "John" <info@newsgroup> wrote in message
>> news:e0InV9iyKHA.4752@newsgroup

>>> Hi
>>>
>>> sbs 2003 standard.
>>>
>>> I have set RBLs in Exchange 2003 using sbl.spamhaus.org. How do I get to
>>> know which and how many messages have been blocked as spam and if I need
>>> to restore a false flag spam message how do I do it?
>>>
>>> Many Thanks
>>>
>>> Regards
>>>
>>>

>
>

Hey Russ, does that mean he 'Aced' you (think of tennis)?

"Ace Fekay [MVP-DS, MCT]" <aceman@newsgroup> wrote in message
news:OiSsYXpyKHA.5940@newsgroup
"Russ SBITS.Biz [SBS-MVP]" <russ@newsgroup> wrote in message
news:4DADE8BA-0FF6-4DA2-A441-78B6B5F3DC36@newsgroup

> OOPS You beat me again Ace
> Russ
>
> --
> Russell Grover - SBITS.Biz [SBS-MVP]
> MCP, MCPS, MCNPS, SBSC
> Small Business Server/Computer Support - www.SBITS.Biz
> Question or Second Opinion - www.PersonalITConsultant.com
> BPOS - Microsoft Online Services - www.Microsoft-Online-Services.com
> Twitter http://www.twitter.com/SBITSdotBiz
>

Sorry!! :-)


Ace

"Russ SBITS.Biz [SBS-MVP]" <russ@newsgroup> wrote in message news:F28A626A-1E1E-4D8B-9A37-3FC1338D7C5D@newsgroup

> GROAN!!!!
>
> Step away from the keyboard.
>
> Yes he Aced me! Woosh!
>

LOL!!



Ace

"John" <info@newsgroup> wrote in message news:%23SGn9ZsyKHA.404@newsgroup

> Hi Ace
>
> Thanks. Know and done as much as this article;
>
> http://www.spamblogging.com/archives/000138.html
>
> Many Thanks
>
> Regards

Yes, that should work.

Ace

"Ace Fekay [MVP-DS, MCT]" <aceman@newsgroup> wrote in message
news:#vhI3LlyKHA.2644@newsgroup

>
> I believe instead of just using sbl.spamhaus.org, you may want to use
> zen.spamhaus.org, which combines all Spamhaus IP-based DNSBLs into one
> single comprehensive blocklist to make querying faster and simpler. It
> contains the SBL, SBLCSS, XBL, CBLand PBL blocklists. Since it's a
> consolidated list, use it alone without any of the other Spahaus RBLs.
> http://www.spamhaus.org/zen/index.lasso
>
> I like SpamRats, too, wihch works nicely.
> Spam Rats!
> www.spamrats.com/about.php

I'm a little confused by the recommendations for zen.spamhaus.org that I've
seen here. Since every dynamic IP on the Internet is on the PBL list (and
some static too), and since not everyone is configured to authenticate when
sending mail (e.g. Comcast does not require SMTP authentication on their
server for mail sent *from Comcast's network*, and there are millions of
people on Comcast), aren't you setting yourself up for guaranteed false
positives? And not necessarily a few, either, particularly if you get mail
from non-business users. XBL can block all sorts of people too, according to
their FAQ, though it doesn't sound as bad.

It seems like the only safe one of Spamhaus's is the SBL, which deals with
known entities.

Spamcop.net's doesn't exactly comfort either, with its statement "The SCBL
is aggressive and often errs on the side of blocking mail." I would think
that they'd want to err on the opposite side, but maybe that's just me, with
a reflex response to hearing from people who aren't getting their mail.

Finally, zen.spamhaus.org carries this warning, which I don't full
understand beyond it being yet another thing to worry about: "Because ZEN
includes the XBL and PBL lists, do not use ZEN on smarthosts or SMTP AUTH
outbound servers for your own customers (or you risk blocking your own
customers). Do not use ZEN in filters that do any ‘deep parsing’ of Received
headers, or for anything other than checking IP addresses that hand off to
your mailservers."

Am I missing something?

I agree with most of what you say however look at the email address I use
for 'that most important other list'.

I continue to run my own server on DYNDNS. OK, it's the LoungeAN rather than
a business network.
I have never had a problem (that I was made aware of) by being on dynamic
IP.

Yes, business should consider the additional cost of Static IP.

"Cliff Galiher - MVP" <cgaliher@newsgroup> wrote in message
news:B54AEDF7-6ED0-4359-87A8-F2AAFCBD3966@newsgroup

> It depends on what you define as "false positives."
>
> I, for one, do not *want* to receive any email from any dynamic IP. A
> dynamic IP, by definition, is dynamic. Sure, a business may be sending
> email from a dynamic IP one day and that mail is legitimate, but then the
> next day (because the IP is dynamic) that IP gets assigned to a
> botnet-infected laptop. Why in the *world* should I accept email from
> any dynamic IP? EVER?!?
>
> In short, there is a cost to being in business. And a business should
> expect to pay for at *least* one of the following:
>
> 1) A static IP. You say there are a few static IPs on zen's XBL list.
> That list is built with ISP's cooperation so if an IP gets on there it is
> because the ISP has reported to zen that it is dynamic. In all my years
> of using zen (and I have a few clients that pay and rsync, so my stats are
> pretty accurate) I've seen *ONE* static mistakenly get on the list. And
> it was easily reported, confirmed with the ISP as a mistake, and removed.
>
> 2) If a business cannot get a static IP, either for financial reasons
> (which I'd almost be tempted to call shennanigans on) or because the ISP
> doesn't offer static (more common in some areas of the world where IP
> addresses are a sought-after commodity) then there are still inexpensive
> (and sometimes free via the ISP) mail relays. And the *relays* have
> static IPs so they also will not get hit by zen's inclusion of XBL.
>
> Non-businesses, similarly, still apply. If ta user sends through gmail
> then the gmail servers handle final delivery, and that is static. The
> only way the mail will appear to come from their dynamic address is if
> they set up an email server in their home *AND* are not sending through an
> authorized relay/mail-forwarder.
>
> ...now, remind me again why I should trust mail coming from a random
> home-user who decided to set up a mailserver from his home? Why should I
> assume that it isn't spam???
>
> Part of the reasoning behind the XBL is assigning a level of trust, and
> dynamic IPs show a complete unwillingness form the sender to take any
> steps to add trust to their email. I, for one, have no problems blocking
> such email on a blanket basis. And as of yet, that has never caused an
> issue in receiving legitimate emails for myself or any of my clients.
>
> -Cliff
>
>
> "Milhouse Van Houten" <btvs@newsgroup> wrote in message
> news:#W5JJwG2KHA.3856@newsgroup

>> "Ace Fekay [MVP-DS, MCT]" <aceman@newsgroup> wrote in
>> message news:#vhI3LlyKHA.2644@newsgroup

>>>
>>> I believe instead of just using sbl.spamhaus.org, you may want to use
>>> zen.spamhaus.org, which combines all Spamhaus IP-based DNSBLs into one
>>> single comprehensive blocklist to make querying faster and simpler. It
>>> contains the SBL, SBLCSS, XBL, CBLand PBL blocklists. Since it's a
>>> consolidated list, use it alone without any of the other Spahaus RBLs.
>>> http://www.spamhaus.org/zen/index.lasso
>>>
>>> I like SpamRats, too, wihch works nicely.
>>> Spam Rats!
>>> www.spamrats.com/about.php

>>
>> I'm a little confused by the recommendations for zen.spamhaus.org that
>> I've seen here. Since every dynamic IP on the Internet is on the PBL list
>> (and some static too), and since not everyone is configured to
>> authenticate when sending mail (e.g. Comcast does not require SMTP
>> authentication on their server for mail sent *from Comcast's network*,
>> and there are millions of people on Comcast), aren't you setting yourself
>> up for guaranteed false positives? And not necessarily a few, either,
>> particularly if you get mail from non-business users. XBL can block all
>> sorts of people too, according to their FAQ, though it doesn't sound as
>> bad.
>>
>> It seems like the only safe one of Spamhaus's is the SBL, which deals
>> with known entities.
>>
>> Spamcop.net's doesn't exactly comfort either, with its statement "The
>> SCBL is aggressive and often errs on the side of blocking mail." I would
>> think that they'd want to err on the opposite side, but maybe that's just
>> me, with a reflex response to hearing from people who aren't getting
>> their mail.
>>
>> Finally, zen.spamhaus.org carries this warning, which I don't full
>> understand beyond it being yet another thing to worry about: "Because ZEN
>> includes the XBL and PBL lists, do not use ZEN on smarthosts or SMTP AUTH
>> outbound servers for your own customers (or you risk blocking your own
>> customers). Do not use ZEN in filters that do any ‘deep parsing’ of
>> Received headers, or for anything other than checking IP addresses that
>> hand off to your mailservers."
>>
>> Am I missing something?

>