On 08/03/2010 00:24, Rops wrote:
I'm trying to figure out why some emails get lost, which most likely is due
to emails killed by ISP spam filter due to high spam score these lost email
have.
How to find out if some mail server is blacklisted and where?
Is there any central database for queries from all different blacklists?
Also IP based search is required and data when and why.
IP based search may be needed, as server under question has it's mailbox
hosted with ISP, but I believe that still the virtual server can be
blacklisted separately based on it's static IP and not the whole ISP mail
server.
Additional side effect is that emails sent inside company get lost more
often - I believe because they virtual server is blacklisted somewhere and
therefore emails sent always gather higher spam score.
So the question is to find out where it's blacklisted?
Thanks for any help and guidelines how and where to continue!
I wrote a Perl app a while ago to do lots of DNSBL lookups -
https://secure.grepular.com/projects/DNSBLSearch
Example usage:
m...@haven:~$ dnsblsearch.pl 92.48.122.147 94.76.192.48/29
m...@haven:~$
If I look up 127.0.0.2 it should be listed by most DNSBLs as it's a test IP:
m...@haven:~$ dnsblsearch.pl 127.0.0.2
127.0.0.2 is listed on dnsbl-2.uceprotect.net 127.0.0.2
127.0.0.2 is listed on blackholes.five-ten-sg.com 127.0.0.2
127.0.0.2 is listed on combined.njabl.org 127.0.0.2, 127.0.0.6
127.0.0.2 is listed on bl.spamcop.net 127.0.0.2
127.0.0.2 is listed on list.dnswl.org 127.0.10.0
127.0.0.2 is listed on b.barracudacentral.org 127.0.0.2
127.0.0.2 is listed on ix.dnsbl.manitu.net 127.0.0.2
127.0.0.2 is listed on psbl.surriel.com 127.0.0.2
127.0.0.2 is listed on hostkarma.junkemailfilter.com 127.0.0.4,
127.0.0.5, 127.0.1.1, 127.0.1.2, 127.0.1.3, 127.0.2.3, 127.0.0.1,
127.0.0.2, 127.0.0.3
127.0.0.2 is listed on bl.spameatingmonkey.net 127.0.0.8, 127.0.0.10,
127.0.0.2, 127.0.0.3, 127.0.0.4
127.0.0.2 is listed on spamguard.leadmon.net 127.0.0.2
127.0.0.2 is listed on spamsources.fabel.dk 127.0.0.2
127.0.0.2 is listed on dnsbl-1.uceprotect.net 127.0.0.2
127.0.0.2 is listed on dnsbl.sorbs.net 127.0.0.4, 127.0.0.5, 127.0.0.6,
127.0.0.7, 127.0.0.8, 127.0.0.9, 127.0.0.10, 127.0.0.2, 127.0.0.3
127.0.0.2 is listed on ubl.unsubscore.com 127.0.0.2
127.0.0.2 is listed on zen.spamhaus.org 127.0.0.2, 127.0.0.4, 127.0.0.10
127.0.0.2 is listed on no-more-funn.moensted.dk 127.0.0.2
127.0.0.2 is listed on ips.backscatterer.org 127.0.0.2
127.0.0.2 is listed on dnsbl-3.uceprotect.net 127.0.0.2
m...@haven:~$
It does the lookups concurrantly so it's quite quick.
--
Mike Cardwell - Perl/Java/Web developer, Linux admin, Email admin
Read my tech Blog - https://secure.grepular.com/
Follow me on Twitter - http://twitter.com/mickeyc
Hire me - http://cardwellit.com/ http://uk.linkedin.com/in/mikecardwell
