Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Internet Blacklist - Ask Directly (Internet Blacklist - Ask Directly)
  •  
jmcnair

Messages: 10
Karma: 0
Send a private message to this user
We subscribe to 4 Internet blacklists (free) but have had a few situations where one (the last case was Spamhaus) blocks an ip that we know is good. When you go to their website and enter the ip, it is not on their list so you can't request to remove. Since we do not "Ask Directly" in the Kerio blacklist setup, I am assuming there is a delay of some sort for the update of our Internet blacklist subscription. If that is the case, what is the delay? Can I manually update the latest list? The manuals seem to recommend not asking directly but I can't find more about this feature.

Thank for any help.
  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
For all the free blacklists you must set

Ask directly = No

Any blacklists like Spamhaus are queried in real-time, so there is no delay, you get the current data.

Maybe the blacklisted IP has already been cleared and when you went to their delisting page you didn't see it anymore.

BTW it is not up to you to de-list someone elses IP address, it should be done by the owner. The owner should first check if he has eliminated the spam source. Only then he should ask for de-listing. If this is not done and spam is sent again from that IP address, he might get listed again.

[Updated on: Fri, 14 December 2012 17:37]


Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
jmcnair

Messages: 10
Karma: 0
Send a private message to this user
thanks for the response. We have set up all free blacklists as "No", but I just didn't see any reasoning or explanation for a 'Yes" answer (other than paid blacklists). You hit the nail on the head with the possibility of a cleared blacklist IP address on Spamhaus but I was rejecting the emails because it was listed on the Spamhaus blacklist. I only got involved after I told them they were being blacklisted, he went to Spamhaus, who said they weren't, and now it is my issue because it's my email server rejecting the valid emails. Feels a bit Catch-22 ish to me. My assumption is that there is some delay from my subscription service updates and the website de-listing option but I can't confirm or deny this.
  •  
jmcnair

Messages: 10
Karma: 0
Send a private message to this user

actual examples..

On Kerio:

[13/Dec/2012 12:10:15] IP address 69.193.16.56 found in DNS blacklist SpamHaus SBL-XBL, mail from <jbutler@town.adams.ma.us> to <pfohlin<_at_>williamstown.net> rejected

On Spamhaus' website we got this:

Blocklist Lookup Results



69.193.16.56 is not listed in the SBL

69.193.16.56 is not listed in the PBL


69.193.16.56 is not listed in the XBL

  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
You can change the Spamhaus black list not to reject the mails but just to add some Spam score (for example 2.0 or 3.0). So you will get the good mail and Spam will most likely end up in your Spam folder.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
j.a.duke

Messages: 351
Karma: 11
Send a private message to this user
jmcnair wrote on Fri, 14 December 2012 12:43

actual examples..

On Kerio:

[13/Dec/2012 12:10:15] IP address 69.193.16.56 found in DNS blacklist SpamHaus SBL-XBL, mail from <jbutler<_at_>town.adams.ma.us> to <pfohlin<_at_>williamstown.net> rejected

On Spamhaus' website we got this:

Blocklist Lookup Results



69.193.16.56 is not listed in the SBL

69.193.16.56 is not listed in the PBL


69.193.16.56 is not listed in the XBL




Most BLs are dynamic and whether an IP is listed, or not, can change in just a couple of minutes time.

I see this constantly, the scenario which you have posted.

I just explain that the sender usually knows that they are blocked due to the return messages from all their emails bouncing back. If they don't know, I'll ask the intended recipient to let the sender know that they've been blocked.

I also explain to the intended recipient that future emails from the sender shouldn't be blocked unless the sender's server or provider is again seen as a spam source. Often I'll whitelist a domain or IP that I feel I can trust to ensure that the email goes through.

Cheers,
Jon
  •  
jmcnair

Messages: 10
Karma: 0
Send a private message to this user
at least I'm not alone. I'm just looking for a better understanding of timing. I currently white list the ip but then I have to clean up the white list at some point. I could just add points for Spamhaus instead of blocking entirely as well. Just another workaround. Just wanted to know more about the "real time" updates and what to expect once someone de-lists themselves.
Previous Topic: Incorrect Quota Warnings
Next Topic: Connect 8 and install_connect.sh
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Aug 21 08:24:13 CEST 2017

Total time taken to generate the page: 0.00455 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.