Disabling dnsbl replies

[mutuku]

Hello,

I want to disable zimbra from sending blocked messages email that has been blocked by dnsbl.

My mail server is being flagged for spamming and I think this might be the cause.

How do I disable this?

Thanks

[phoenix]

Originally Posted by mutuku

I want to disable zimbra from sending blocked messages email that has been blocked by dnsbl.

Who is it sending the email to?

Originally Posted by mutuku

My mail server is being flagged for spamming and I think this might be the cause.

That's not likely to be the reason you're listed and you haven't said what investigation you've done into why you're actually on a blacklist.

[mutuku]

If Someone sends mail to my mail server and they are blocked during dnsbl checks, they(the sender) get an error( e.g host
[X.X.X.X] blocked using dnsbl.sorbs.net; Exploitable Server See:
SORBS Database Lookup
), X.X.X.X being the IP of the sneders mail server.

the resason I am on the black list is this 41.215.35.14 | Mail Server | Dictionary Attacker | IP Address Inspector | Project Honey Pot.

I have checked the zimbra logs and there are no traces of the said mail. My server is not an open relay.

[phoenix]

Originally Posted by mutuku

If Someone sends mail to my mail server and they are blocked during dnsbl checks, they(the sender) get an error( e.g host
[X.X.X.X] blocked using dnsbl.sorbs.net; Exploitable Server See:
SORBS Database Lookup
), X.X.X.X being the IP of the sneders mail server.

That is not an email, it's a response to the sender being blocked and shouldn't cause you any problems with being listed as a spam source.

Originally Posted by mutuku

the resason I am on the black list is this 41.215.35.14 | Mail Server | Dictionary Attacker | IP Address Inspector | Project Honey Pot.

I have checked the zimbra logs and there are no traces of the said mail. My server is not an open relay.

You wouldn't see the subject in your log files, you need to see if any of your users are sending unusual levels of email. You should also check your audit log to see if there's any unusual activity in there.

[mutuku]

Audit.log seems ok. Only users who have account are authenticating

On sending of emails, the daily mail reports send to admin@mydomain are a bit confusing. Under "Most active senders", there are email addresses that are not from my domain. Same issue under "Most active recipients". Is this normal?

[phoenix]

Originally Posted by mutuku

Audit.log seems ok. Only users who have account are authenticating

On sending of emails, the daily mail reports send to admin@mydomain are a bit confusing. Under "Most active senders", there are email addresses that are not from my domain. Same issue under "Most active recipients". Is this normal?

Yes it's normal, they are the 'most active' and they include email received at your server.