[dba-Tech] Use of Blacklists on mail servers

Erwin Craps - IT Helps Erwin.Craps at ithelps.eu
Thu Feb 14 02:56:25 CST 2008


One of my clients got recently on a ip blacklist due to spam send from a
infected computer within the network, probably from end December till
last week.

Although I personally manage the network all computers had fully updated
virus scanners (McAfee) but I Installed Trend Micro halfway Januari so
posibly something went wrong migrating from one to another.

The Trojan was new and vicious and passed both virus scanners. Cause I
don't scan existing files (only write/modify) neither do a weekly scan
on desktops the Trojan managed to stay alive on this system... I do not
scan cause of user complaint of slow computers...

 

This brings up the discussion of using Blacklists like spamcop to me.

I looked into this matter 1 or 2 years ago and read several things about
it that Blacklists are not that good against spam and are a in forehand
lost fight against spam. Several  blacklists where stopping at that
moment, so I decided not to use the principle of a blacklist.

 

But, now I got forced in to the matter and noticed ISP are still using
blacklists. So I installed a blacklist on this customer server and on my
own server for evaluation purposes.

 

I already notices a major decrease in spam in my spam folder (I'm using
trend micro to detect spam), but the spam that is not detected by Trend
Micro is still getting in my inbox, I don't have the impression that
this is lowering, but I only installed it yesterday evening, I have to
be patient to see some real result.

 

My question is, what is the opinion and practical experience of the
people on this list that manage mailservers?

What about false positives?

 I want to know if I would need to configure blacklist by default on my
clients mail servers or not?

 

thx

 

Erwin Craps

Zaakvoerder 

 

Internetwinkel op http://shop.ithelps.eu 

http://www.linkedin.com/in/erwincraps
<http://www.linkedin.com/in/erwincraps> 

www.ithelps.be/onsgezin <http://www.ithelps.be/onsgezin> 

bezoek ook eens de website van mijn zus www.friedacraps.be
<http://www.friedacraps.be/> 

 

This E-mail is confidential, may be legally privileged, and is for the
intended recipient only. Access, disclosure, copying, distribution, or
reliance on any of it by anyone else is prohibited and may be a criminal
offence. Please delete if obtained in error and E-mail confirmation to
the sender.

IT Helps - I.T. Help Center   *   Box Office Belgium & Luxembourg

www.ithelps.eu <http://www.ithelps.be/>   *  www.boxoffice.be
<http://www.boxoffice.be/>  

IT Helps bvba  *  Mercatorpad 3  *  3000 Leuven

IT Helps  *  Phone: +32 16 296 404  *  Fax: +32 16 296 405 E-mail:
Info at ithelps.eu <mailto:Info at ithelps.be>  

Box Office  *  Fax: +32 16 296 406  *  Box Office E-mail:
Staff at boxoffice.be <mailto:figures at boxoffice.be> 

 




More information about the dba-Tech mailing list