This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Which RBL is flagging the email?

XGS2300, 19.5.4

We're getting a lot of false positive blocked IP addresses lately. Where in the logs can I find what specific IP address is being blocked (since the message does not arrive I can't look at the headers) and which RBL is blocking it. All the logs say is "IP is blocked" with no details so I can't do anything with it.

Thanks.

This thread was automatically locked due to age.

Top Replies

BrucekConvergent 5 months ago +1 suggested

Unfortunately the logging is a bit poor for email filtering on XGS (it's been brought up before - long discussion and I'm on the side of the users) -- my tact has been to enter the IP being blocked into…

Parents

0 BrucekConvergent 5 months ago

Unfortunately the logging is a bit poor for email filtering on XGS (it's been brought up before - long discussion and I'm on the side of the users) -- my tact has been to enter the IP being blocked into the blocklist checker at Email Blacklist Check - IP Blacklist Check - See if your server is blacklisted (mxtoolbox.com) -- Sophos uses an amalgamation of several RBLs, and I've found the results I get here point to the culprit in all cases that I've had to deal with.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up +1 Vote Down

Cancel

Reply

0 BrucekConvergent 5 months ago

Unfortunately the logging is a bit poor for email filtering on XGS (it's been brought up before - long discussion and I'm on the side of the users) -- my tact has been to enter the IP being blocked into the blocklist checker at Email Blacklist Check - IP Blacklist Check - See if your server is blacklisted (mxtoolbox.com) -- Sophos uses an amalgamation of several RBLs, and I've found the results I get here point to the culprit in all cases that I've had to deal with.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up +1 Vote Down

Cancel

Children

No Data