Home > Archive > microsoft.public.exchange2000.admin > August 2002 > implementing DNS blacklist in exchange?





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author implementing DNS blacklist in exchange?
Guillermo Lovato

2002-08-12, 8:23 am

i wan tto implement spamhaus DNS blacklist in exchange. From what i've seen,
this is not possible(it appears that exchange is not consumer aware, meaning
that you must continuosly spend in it buying 3rd party software to do the
things that exchange do).

So, is there any way to do that?


Peter Karsai

2002-08-13, 1:23 am

Hello,

It is also possible by creating a simple SMTP Transport Event sink.
Siegfried Weber has created an excellent DNSBL/RBL script. All you need is
knowledge of a scripting language and some third-party OLE objects to
perform DNS lookups.

Regards,

Peter Karsai
http://www.vamsoft.com

"Guillermo Lovato" <glovato@belt.com.ar> wrote in message
news:evwpMTgQCHA.2660@tkmsftngp12...
> i wan tto implement spamhaus DNS blacklist in exchange. From what i've

seen,
> this is not possible(it appears that exchange is not consumer aware,

meaning
> that you must continuosly spend in it buying 3rd party software to do the
> things that exchange do).
>
> So, is there any way to do that?
>
>



Siegfried Weber [MVP]

2002-08-13, 6:23 am

"Guillermo Lovato" <glovato@belt.com.ar> wrote in message...
>
> i wan tto implement spamhaus DNS blacklist in exchange. From what i've

seen,
> this is not possible(it appears that exchange is not consumer aware,

meaning
> that you must continuosly spend in it buying 3rd party software to do the
> things that exchange do).


Exchange does its job as other products like Lotus/IBM Domino, Novell
Groupwise does. None of them comes with a built-in SPAM feature like you are
asking for. So what gives?

> So, is there any way to do that?


As Peter replied in another message. You can always start to learn
developing your own if you don't want to spend the money in third party
solutions. But given the amount of time and money it might take for somebody
who never developed with Windows 2000 and Exchange 2000 it will be certainly
easier buying a third party app like that one: http://www.vamsoft.com

--
<Cheers:Siegfried runat="server" />

Development Lead,

Microsoft Most Valuable Professional (MVP) - Exchange Server

CDOLive LLC - The Microsoft Messaging and Collaboration Application Experts
http://www.cdolive.com

Please reply to the newsgroups so that others can benefit from the
discussion.
Questions by e-mail are discarded without further notice.


Guillermo Lovato

2002-08-13, 7:23 am

it's a good point, but the company wont buy it...., it's not my call.
and because our mail load is relatively small and the spam percent isn't
very high, the cost of a 3rd party addon is prohibitive

Where can i find that event sink Peter?

"Siegfried Weber [MVP]" <info@cdolive.com> wrote in message
news:ONE3fFsQCHA.2480@tkmsftngp09...
> "Guillermo Lovato" <glovato@belt.com.ar> wrote in message...
> >
> > i wan tto implement spamhaus DNS blacklist in exchange. From what i've

> seen,
> > this is not possible(it appears that exchange is not consumer aware,

> meaning
> > that you must continuosly spend in it buying 3rd party software to do

the
> > things that exchange do).

>
> Exchange does its job as other products like Lotus/IBM Domino, Novell
> Groupwise does. None of them comes with a built-in SPAM feature like you

are
> asking for. So what gives?
>
> > So, is there any way to do that?

>
> As Peter replied in another message. You can always start to learn
> developing your own if you don't want to spend the money in third party
> solutions. But given the amount of time and money it might take for

somebody
> who never developed with Windows 2000 and Exchange 2000 it will be

certainly
> easier buying a third party app like that one: http://www.vamsoft.com
>
> --
> <Cheers:Siegfried runat="server" />
>
> Development Lead,
>
> Microsoft Most Valuable Professional (MVP) - Exchange Server
>
> CDOLive LLC - The Microsoft Messaging and Collaboration Application

Experts
> http://www.cdolive.com
>
> Please reply to the newsgroups so that others can benefit from the
> discussion.
> Questions by e-mail are discarded without further notice.
>
>



Peter Karsai

2002-08-13, 8:23 am

I could not find the URL, but Siegfried will post it soon. If you have a
little VBScript/JScript knowlendge (or even Perl, Python), developing a
CDOSYS SMTP transport event sink is very easy.

MSDN:
http://msdn.microsoft.com/library/d...-us/cdosys/html
/ _cdosys_smtp_nntp_transport_ev
ent_sinks_with_cdo.asp?frame=true

Article about about an event sink:
http://www.vamsoft.com/articles/howto-readreceipt.asp

Regards,

Peter Karsai
http://www.vamsoft.com

"Guillermo Lovato" <glovato@belt.com.ar> wrote in message
news:eWFKhUsQCHA.3648@tkmsftngp11...
> it's a good point, but the company wont buy it...., it's not my call.
> and because our mail load is relatively small and the spam percent isn't
> very high, the cost of a 3rd party addon is prohibitive
>
> Where can i find that event sink Peter?
>
> "Siegfried Weber [MVP]" <info@cdolive.com> wrote in message
> news:ONE3fFsQCHA.2480@tkmsftngp09...
> > "Guillermo Lovato" <glovato@belt.com.ar> wrote in message...
> > >
> > > i wan tto implement spamhaus DNS blacklist in exchange. From what i've

> > seen,
> > > this is not possible(it appears that exchange is not consumer aware,

> > meaning
> > > that you must continuosly spend in it buying 3rd party software to do

> the
> > > things that exchange do).

> >
> > Exchange does its job as other products like Lotus/IBM Domino, Novell
> > Groupwise does. None of them comes with a built-in SPAM feature like you

> are
> > asking for. So what gives?
> >
> > > So, is there any way to do that?

> >
> > As Peter replied in another message. You can always start to learn
> > developing your own if you don't want to spend the money in third party
> > solutions. But given the amount of time and money it might take for

> somebody
> > who never developed with Windows 2000 and Exchange 2000 it will be

> certainly
> > easier buying a third party app like that one: http://www.vamsoft.com
> >
> > --
> > <Cheers:Siegfried runat="server" />
> >
> > Development Lead,
> >
> > Microsoft Most Valuable Professional (MVP) - Exchange Server
> >
> > CDOLive LLC - The Microsoft Messaging and Collaboration Application

> Experts
> > http://www.cdolive.com
> >
> > Please reply to the newsgroups so that others can benefit from the
> > discussion.
> > Questions by e-mail are discarded without further notice.




Siegfried Weber [MVP]

2002-08-13, 8:23 am

"Guillermo Lovato" <glovato@belt.com.ar> wrote in message...
>
> it's a good point, but the company wont buy it...., it's not my call.


Understood. In this case you might want to look into a anti virus product
for your Exchange Server. Some of them include such content filtering
features and more. I am happily using Sybari AntiGen here:
http://www.sybari.com and your management wouldn't bail on you if you
propose to protect the company from viri, would they?

> and because our mail load is relatively small and the spam percent isn't
> very high, the cost of a 3rd party addon is prohibitive


I think that's a hard to calculate factor. I am getting aprx 2000 mails per
month for 5 a mailbox server which out of 500 are junk/SPAM. I'm running
self developed filters for subject/body + full sender address or even whole
domains. With all those filters in place still 100-200 slip through and I
have to do some work to clean them out of the system.

> Where can i find that event sink Peter?


http://www.cdolive.net/download/SMT...RBLBlocking.zip No
documentation though. Just the code.

Good luck!

--
<Cheers:Siegfried runat="server" />

Development Lead,

Microsoft Most Valuable Professional (MVP) - Exchange Server

CDOLive LLC - The Microsoft Messaging and Collaboration Application Experts
http://www.cdolive.com

Please reply to the newsgroups so that others can benefit from the
discussion.
Questions by e-mail are discarded without further notice.


Guillermo Lovato

2002-08-13, 9:23 am

Yes, i've read about exchange antivirus tools which also has some sort of
content inspection.
But we already have a exchange antivirus(which is the same as the company
antivirus), CA InoculateIT 6, which does just that, virus protection,
nothing else.

well i will check that script, since i'm no script wiz i will test in in a
lab environment

2000 mails/motnh with 500 spam?, that's a very large amount of spam!.
i have to run checks, but our mail flow must be 1500 mails/month TOP for a
16 mailbox, and the spam rate is about les than 50 month for all mailboxes.

the spam mainly comes to my mailbox since is the one that is used mostly for
software registration/downloads/dirty research, the others are very clean
since it's used for direct mails with customers/other companies.

"Siegfried Weber [MVP]" <info@cdolive.com> wrote in message
news:#1rzn7sQCHA.1880@tkmsftngp13...
> "Guillermo Lovato" <glovato@belt.com.ar> wrote in message...
> >
> > it's a good point, but the company wont buy it...., it's not my call.

>
> Understood. In this case you might want to look into a anti virus product
> for your Exchange Server. Some of them include such content filtering
> features and more. I am happily using Sybari AntiGen here:
> http://www.sybari.com and your management wouldn't bail on you if you
> propose to protect the company from viri, would they?
>
> > and because our mail load is relatively small and the spam percent isn't
> > very high, the cost of a 3rd party addon is prohibitive

>
> I think that's a hard to calculate factor. I am getting aprx 2000 mails

per
> month for 5 a mailbox server which out of 500 are junk/SPAM. I'm running
> self developed filters for subject/body + full sender address or even

whole
> domains. With all those filters in place still 100-200 slip through and I
> have to do some work to clean them out of the system.
>
> > Where can i find that event sink Peter?

>
> http://www.cdolive.net/download/SMT...RBLBlocking.zip No
> documentation though. Just the code.
>
> Good luck!
>
> --
> <Cheers:Siegfried runat="server" />
>
> Development Lead,
>
> Microsoft Most Valuable Professional (MVP) - Exchange Server
>
> CDOLive LLC - The Microsoft Messaging and Collaboration Application

Experts
> http://www.cdolive.com
>
> Please reply to the newsgroups so that others can benefit from the
> discussion.
> Questions by e-mail are discarded without further notice.
>
>



Siegfried Weber [MVP]

2002-08-14, 9:23 am

"Guillermo Lovato" <glovato@belt.com.ar> wrote in message...
>
> But we already have a exchange antivirus(which is the same as the company
> antivirus), CA InoculateIT 6, which does just that, virus protection,
> nothing else.


Bad luck ;-) I am a happy user of Sybari AntiGen and their content filtering
plus the max 5 scan engines makes it IMHO to one of the best AV products for
Exchange.

> well i will check that script, since i'm no script wiz i will test in in a
> lab environment


A very wise idea :-))

> 2000 mails/motnh with 500 spam?, that's a very large amount of spam!.
> i have to run checks, but our mail flow must be 1500 mails/month TOP for a
> 16 mailbox, and the spam rate is about les than 50 month for all

mailboxes.

You luck charm! I know a small shop with less than 20 employees which get
2000 mails/month SPAM only...

> the spam mainly comes to my mailbox since is the one that is used mostly

for
> software registration/downloads/dirty research, the others are very clean
> since it's used for direct mails with customers/other companies.


Hence I ceased using my personal mail address in most of the public places.
For SW registration I always use me@privacy.net ;-)

--
<Cheers:Siegfried runat="server" />

Development Lead,

Microsoft Most Valuable Professional (MVP) - Exchange Server

CDOLive LLC - The Microsoft Messaging and Collaboration Application Experts
http://www.cdolive.com

Please reply to the newsgroups so that others can benefit from the
discussion.
Questions by e-mail are discarded without further notice.


Sponsored Links





Free Braindumps | MCSE braindumps software forum

Copyright 2003 - 2008 examnotes.net