Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 3 subscribers
  • Views 5277 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RBL blocking all mails

JohnnyInc

Hi everyone,

a customer told us today to add some custom RBLs at his UTM, because he is getting a lot of spam and the "recommended RBLs" are not enough for him.

So I added four RLBs today:

  • zen.spamhaus.org
  • psbl.surriel.com
  • sbl-xbl.spamhaus.org
  • blackholes.easynet.nl

As soon as I configured it like that, nearly all incoming mails are blackholed as spam, even if their IPs are NOT on any spamlist.

Does anybody know that problem with custom RBLs?

Best regards, Johnny



This thread was automatically locked due to age.
Parents
  • 0

    Hello Johnny,

    you should remove the two spamhaus.org entries. I don't remember exactly, but either there was a problem or they are not in business for Sophos UTM usage anymore.

    Mit freundlichem Gruß, best regards from Germany,

    Philipp Rusch

    New Vision GmbH, Germany
    Sophos Silver-Partner

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to PhilippRusch

    Thank you very much for your fast and very helpful reply. In the meantime I opened a ticket at Sophos, but it hasn't been helpful yet.

    I removed the two spamhaus RBLs and added yours so I have now:

    • ix.dnsbl.manitu.net
    • bl.spamcop.net
    • dnsbl-1.uceprotect.net
    • dnsbl-2.uceprotect.net
    • psbl.surriel.com
    • blackholes.easynet.nl
    • dnsbl.sorbs.net
    • blackholes.mail-abuse.org

    and there was not one false positive yet.

    Of course it would be nice to use spamhaus because I consider spamhaus as the biggest, safest and most spam defending RLB in Europe (hopefully I am not right with that, if we could not use them), so it would be nice if we could use them.

    If my Sophos support ticket leads anywhere, I will let anybody now.

    Thank you very much!

Reply
  • 0 in reply to PhilippRusch

    Thank you very much for your fast and very helpful reply. In the meantime I opened a ticket at Sophos, but it hasn't been helpful yet.

    I removed the two spamhaus RBLs and added yours so I have now:

    • ix.dnsbl.manitu.net
    • bl.spamcop.net
    • dnsbl-1.uceprotect.net
    • dnsbl-2.uceprotect.net
    • psbl.surriel.com
    • blackholes.easynet.nl
    • dnsbl.sorbs.net
    • blackholes.mail-abuse.org

    and there was not one false positive yet.

    Of course it would be nice to use spamhaus because I consider spamhaus as the biggest, safest and most spam defending RLB in Europe (hopefully I am not right with that, if we could not use them), so it would be nice if we could use them.

    If my Sophos support ticket leads anywhere, I will let anybody now.

    Thank you very much!

Children
No Data
Unfiltered HTML