This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Spam coming through even being blacklisted

I am running a UTM1120 v5 (2GB) at home filtering my SMTP emails which are received by my Zarafa server on my Synology DS-713+ (expanded to 4GB).

My UTM120 is running on up-to-date version 9.309-3. I am using the following RBLs:

zen.spamhaus.org
cbl.abuseat.org
bl.spamcop.net
spam.dnsbl.sorbs.net
http.dnsbl.sorbs.net
socks.dnsbl.sorbs.net
misc.dnsbl.sorbs.net
smtp.dnsbl.sorbs.net
web.dnsbl.sorbs.net
block.dnsbl.sorbs.net
zombie.dnsbl.sorbs.net

Now I got (again) an email from "shoppingdistrict@dankeja.de" which is still blacklisted for a longer time in my sender addresses using the following string

*@dankeja.de

Under "Relaying" I entered my "upstream host/network" which is my 1&1 email server where my domain is hosted and which forwards emails:

moutng.kundenserver.de

This email came from another 1&1 server which shows up as "mout.kundenserver.de (212.227.126.187)". Does that now mean that I also have to add this one to my "upstream host/netzwork" list? Or is the astaro spamfilter malfunctioning???


This thread was automatically locked due to age.
Parents
  • Has anyone an idea WHY I receive emails sometimes through 1&1 and sometimes directly?

    I guess that you have an MX with a higher priority that points at mx.kundenserver.de.
    add "mydomain.dyndns.org" to the "upload Hosts/networks"?

    Not if that's the FQDN to reach your UTM on an interface with a default gateway.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Has anyone an idea WHY I receive emails sometimes through 1&1 and sometimes directly?

    I guess that you have an MX with a higher priority that points at mx.kundenserver.de.
    add "mydomain.dyndns.org" to the "upload Hosts/networks"?

    Not if that's the FQDN to reach your UTM on an interface with a default gateway.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data