cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2928
Views
1
Helpful
3
Replies

Spamhaus DBL support?

jasongurtz
Level 1
Level 1

I'm interested if the Ironport supports (or will in the future) querying the Spamhaus DBL: http://www.spamhaus.org/news.lasso?article=655

Unlike other DNS block lists, this one supports domain name queries only and does not support IP address queries at all.  They recommend using it to check URIs in the message content as well as headers.

Would be great to see this support!

3 Replies 3

Valter Da Costa
Cisco Employee
Cisco Employee

Greetings there,

I did not configured it personally but the following link will refer you to our Knowledge Base article on how to configure the appliance for querying DNS Blacklists.

http://tinyurl.com/2hjbrv

I hope this helps.

-V

Thank you, but I am already aware of how to configure querying a blacklist in the Ironport. Support fail, please re-parse my query.

I suggest anyone thinking of responding to this thread to actually READ the link included in my original post as well as the DBL FAQ: http://www.spamhaus.org/faq/answers.lasso?section=Spamhaus%20DBL

In particular find in the FAQ the following statement:

You must not put 'dbl.spamhaus.org' into any email server 'DNSBL' or 'RBLs' feature, spam firewall or spam filter unless it specifically states that blocklists entered there are used for domain checking only. If you are unsure, ask your spam filter developer.

Five Months for the appearance of a completely off-the-wall response to, basically, a yes/no question....anyone want to place bets on something effectual actually appearing here?

Jason,

the answer to your question is definitely no, AsyncOS for the Cisco IronPort Email appliances currently does not support Spamhaus DBL - as you already pointed out correctly it's using a different format of queries/response than the usual external blacklist that can be figured in the HAT. Can't tell you about the Roadmap, but it is certainly under consideration. I have checked if there is any feature request on this so far, also negative, so feel free to open a ticket with support to have one filed, as these are monitored by  product management as well.

Regards,

Andreas