Reply to topic
Claus von Wolfhausen


Joined: 17 May 2008
Posts: 1
Reply with quote
rcorbin wrote:

Some settings we found while fighting 'spam floods' on our shared servers were implementing some RBLs. This is how we would typcally set the servers in the event of a flood from something like a botnet.

Login to SmarterMail Admin - Security - Anti-Spam Administration - Add RBL List

RBL: Backscatter.org - Weight: 5 - DNS Server: ips.backscatterer.org


I would consider such a usage as "not optimal".

ips.backscatterer.org is most effective if you are using it for blocking in SAFE MODE.

SAFE MODE means you are doing queries if Envelope From is either <> or postmaster only.
Used that way you can not loose any real mail, but it will protect you against fake bounces or abusive sender callouts.

See: http://www.backscatterer.org/index.php?target=usage for more details.

Please also note that the correct domain is backscatterer.org, the other one (missing 2 letters) does not belong to the project and is registered by a domainsquatter.
rcorbin


Joined: 02 Jul 2007
Posts: 65
Location: Newark, DE
Reply with quote
good catch I had the RBL's name misspelled (blah copy and paste!), but the DNS server was correct in the post with the er* at the end.

I find the settings to be fine. It only gives the message a score of 5. With the settings that I put it has to have a score of 20 to fail. Most providers who still do backscatter it usually comes from servers other then their outbound gateways (if setup 'optimally').

SmarterMail doesn't have a 'safe' mode and it can't be applied to only the postmasters address or System Administrator.

-Ray
Grey Listing rocks! No more Spam!
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 2 of 2  

  
  
 Reply to topic