Black listed server

Question

Hi, 
 
 I have had a web server continuously marked in cbl.abuseat.org blacklist. I can't find which one it is... I know that I can block the port 25, but I would like to know wich one is the spammer.... 
 
 Any ideias how to find it in logs? 
 
 Best regards.

LuCar Toni · Answer

Basically do not open Port 25 for anybody. Its from a security view bad practice to do so. 
 User Email tools uses 465/587 SMTP for users. Port 25 should be only be used by MTAs. 
 Because thats exactly what happen, if you open Port 25 for users.

Hayim Caspy · Answer

As you were told already, port 25 should be open only from servers that supervise the email coming from that server. For example, if you send it through other MTA such as Sophos, its ok. If you have AV with email control on that server, that OK. you should have a rule that blocks smtp out with the exclusion of the protected nat machines.

Black listed server

Top Replies