UCEAS.net
Unsolicited Commercial Email Analysis System
Anti-Spam Tools Mailing Lists
just starting, low volume
|
|
RBL-Server-HOWTO
|
- Create your own local RBL Server
- To lessen the burden of external dns lookups
- Add additional spammers to your local rbl not yet in the general public
- An RBL server is one of many ways to minize our costs to handle their spam
- Our Rights
- We ( people and corporations ) have the right to refuse incoming emails from whomever we wish to decline to interact with the unwanted spammers
- WhiteLists
- Whitelists works great for personal email, since you know who your freinds are
- Whitelists will NOT work for business because you do NOT know which stranger will come knocking with a big order
|
| MTA w/ RBL Checking Enabled |
- for each incoming email, your MTA will create a reverse ip# of the suspect spammer ( ip# w.x.y.z )
- your MTA will look for an A record for z.y.x.w.rbl.rbl-db-lookup-site.com
- if w.x.y.z is a spammer, the RBL server returns 127.0.0.2, returns null otherwise
- your MTA can be configured to drop the mail or bounce it back to fill the spammers mailbox
|
| RBL-Server HOWTO |
- Install an rbl-capable DNS Server
- Add 127.0.0.2 ( a Test Spammer ) for testing the RBL server is working
- Define your RBL Error Codes
- For each reported spam
- Save a copy of the reported spam in its entirty
- (automatically) create a zone file for each spammer's ip#
- Create a cgi-script to allow them to check if they're listed in your DB
- Create a cgi-script to allow bl'd spammers to get out of your RBL w/ your review and approval
- Allow your corp MTAs to check your customized corporate RBL server for spammers
|
| RBL Mailing Lists |
|
| Existing RBLs |
|
| RBL Capable DNS Server |
|
| RBL 127.0.0.x Error Codes |
|
| Testing the RBL Server |
- All RBL Servers should have 127.0.0.2 listed as a spammer for testing purposes
- nslookup type=A 2.0.0.127.bl.spamcop.net
- ping 2.0.0.127.bl.spamcop.net
- dig 2.0.0.127.bl.spamcop.net ( default is type=A records )
- dig 1.1.168.192.bogons.cymru.com
- dig +short 1.1.168.192.bogons.cymru.com
- dnsip 2.0.0.127.bl.spamcop.net
- it should return 127.0.0.2 if its an ip# of a suspect spammer,
in this case, it is
- Most RBLs should return 127.0.0.2 ( yes its a spammer ) for 2.0.0.127.rbl.Favorite-RBL-DB.com
- if it fails, the server could be miconfigured
- if it fails, the 127.0.0.2 test entry is missing
|
| RBL Server Examples |
|