chun

http://www.symantec.com/business/support/index?page=content&id=TECH162845

Problem

The IP of a spam source missed by the Premium Antispam filter built into the SMSMSE is on a Major RBL. There is not an option to input the RBL in the SMSMSE.

Environment

Server 2003(x64)

Server 2008(x64)

Exchange 2007 and 2010

Cause

This is expected behavior.

http://www.symantec.com/business/support/index?page=content&id=TECH88712&actp=search&viewlocale=en_US&searchid=1308762819104

 

Solution

Launch the Exchange Shell Management  and you may add several different well known RBL's by right clicking and pasting and then hitting enter.

Add-IPBlockListProvider -Name bl.spamcop.net -LookupDomain bl.spamcop.net -Enabled $True -RejectionResponse "{1.EN_US} has blocked your IP address ({0.EN_US}) using the list '{2.EN_US}'. Please see http://www.spamcop.net/w3m?action=checkblock&ip={0.EN_US} for further information. This organization has no control over this RBL (Realtime Block List)"

Add-IPBlockListProvider -Name dnsbl.sorbs.net -LookupDomain dnsbl.sorbs.net -Enabled $True -RejectionResponse "{1.EN_US} has blocked your IP address ({0.EN_US}) using the list '{2.EN_US}'. Please see http://www.au.sorbs.net/lookup.shtml for further information. This organization has no control over this RBL (Realtime Block List)."

Add-IPBlockListProvider -Name zen.spamhaus.org -LookupDomain zen.spamhaus.org -Enabled $True -RejectionResponse "{1.EN_US} has blocked your IP address ({0.EN_US}) using the list '{2.EN_US}'. Please see http://www.spamhaus.org/query/bl?ip={0.EN_US} for further information. This organization has no control over this RBL (Realtime Block List)."

Add-IPBlockListProvider -Name cbl.abuseat.org -LookupDomain cbl.abuseat.org -Enabled $True -RejectionResponse "{1.EN_US} has blocked your IP address ({0.EN_US}) using the list '{2.EN_US}'. Please see http://cbl.abuseat.org/lookup.cgi?ip={0.EN_US} for further information. This organization has no control over this RBL (Realtime Block List)."

Add-IPBlockListProvider -Name b.barracudacentral.org -LookupDomain b.barracudacentral.org -Enabled $True -RejectionResponse "{1.EN_US} has blocked your IP address ({0.EN_US}) using the list '{2.EN_US}'. Please see http://barracudacentral.org/lookups/ip-reputation for further information. This organization has no control over this RBL ."

Add-IPBlockListProvider -Name spam.dnsbl.sorbs.net -LookupDomain spam.dnsbl.sorbs.net -Enabled $True -RejectionResponse "{1.EN_US} has blocked your IP address ({0.EN_US}) using the list '{2.EN_US}'. Please see http://www.au.sorbs.net/lookup.shtml for further information. This organization has no control over this RBL (Realtime Block List)."

Add-IPBlockListProvider -Name spam.rbl.msrbl.net -LookupDomain spam.rbl.msrbl.net -Enabled $True -RejectionResponse "{1.EN_US} has blocked your IP address ({0.EN_US}) using the list '{2.EN_US}'. Please see http://www.msrbl.com/check?ip={0.EN_US} for further information. This organization has no control over this RBL (Realtime Block List)."

Add-IPBlockListProvider -Name bl.spamcannibal.org -LookupDomain bl.spamcannibal.org -Enabled $True -RejectionResponse "{1.EN_US} has blocked your IP address ({0.EN_US}) using the list '{2.EN_US}'. Please see http://spamcannibal.org/cannibal.cgi for further information. This organization has no control over this RBL (Realtime Block List)."

Add-IPBlockListProvider -Name psbl.surriel.com -LookupDomain psbl.surriel.com -Enabled $True -RejectionResponse "{1.EN_US} has blocked your IP address ({0.EN_US}) using the list '{2.EN_US}'. Please see http://psbl.surriel.com/listing?ip={0.EN_US} for further information. This organization has no control over this RBL (Realtime Block List)."

These commands are provided as a courtesey and are to be used at your own risk as Symantec has no control over these lists.

 

Article URL http://www.symantec.com/docs/TECH162845

Terms of use for this information are found in Legal Notices