Forefront Server Security Support Blog

A place for CSS to share experiences supporting Forefront Server Security and Antigen

Spamhaus Update

Spamhaus Update

  • Comments 4
  • Likes

Although Microsoft doesn’t recommended any particular RBL (Realtime Block List) provider for use with Antigen products, Spamhaus is one of the most widely-known providers on the market.

 

It’s come to our attention recently that Spamhaus has phased out the old SBL-XBL list, which has now been replaced by the ZEN list (named after a guard dog).

 

Here’s a comparison of the currently available Spamhaus lists (source: www.spamhaus.org):

 

List Name

Contains

Antigen RBL entry

Spamhaus Block List (SBL)

Direct UBE sources, spam services and ROKSO spammers

sbl.spamhaus.org

Exploits Block List (XBL)

Illegal 3rd party exploits, including proxies, worms and trojan exploits

xbl.spamhaus.org

Policy Block List (PBL)

Non-MTA IP address ranges set by outbound mail policy.

pbl.spamhaus.org

ZEN Block List (ZEN)

All 3 SBL, XBL and PBL lists combined

zen.spamhaus.org

 

So, what does this mean for you as an administrator of Antigen?

If you’re already using Spamhaus as a RBL list in some way, you need to decide whether to use only the ZEN list, or a combination of the SBL, XBL and PBL lists. Really, if you are happy with blocking the content of all 3 lists, it makes sense to go with Spamhaus’ recommendation of using just the ZEN list. This will improve your lookup responses, as you’ll only need to make one lookup per mail, rather than a potentially 3 lookups (one per SBL, XBL and PBL list).

 

You should also delete any SBL-XBL list that you have enabled (sbl-xbl.spamhaus.org), since it is no longer in use. This is important to do; otherwise it can cause delays while Antigen is waiting for the corresponding RBL lookup to come back.

 

Note that Spamhaus provides a free service to smaller customers only. Before using Spamhaus as a RBL service within Antigen, please check to see if you qualify for free usage on the Spamhaus DNSBL Usage page. Otherwise you’ll have to get yer wallet out...

 

Cheers,

Andy Day

Microsoft CSS (Customer Service and Support)

Comments
  • such a program, thank you for giving news of the update are super

  • Known to be very useful Spamhaus is a system provider. Real-time block list does not have a very useful for the spamhaus. I wish success to all users...

  • Known to be very useful Spamhaus is a system provider. Real-time block list does not have a very useful for the spamhaus. I wish success to all users

  • This and similar information-sharing my vocabulary expanded again. Thank you for your writing ...

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment