You probably want to take this in baby steps. Let's start with - are you sure that you're not already running a DNS server on your mailserver? Then you can go on with using Add/Remove to add the DNS server.
To avoid any issue with your mailserver needing DNS records at all, just change your Declude configuration to use the new DNS server. In section 6.4 of the Declude.JunkMail manual you will see the DNS command to put in your global.cfg to use the local DNS service, e.g. DNS 127.0.0.1 by doing that, only Declude changes. Your IMail will continue to perform DNS as it was, which Covad will not complain about, and you won't accidentally change something delicate. Andrew 8) p.s. There is no corresponding setting in your Declude.Virus config file, but no worry, at worst it will make one DNS query per viral message detected, if you're using the "AUTOFORGE ON" feature. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers Sent: Thursday, March 31, 2005 2:42 PM To: [email protected] Subject: Re: [Declude.Virus] Covad has a problem with our RBL Thanks for the response guys. You're talking to a newb, so bear with me. In order to setup my own DNS server on the same box as Imail, I need to: 1. Add that service in the Add/Remove Windows components (running W2K Server). 2. In Imail's SMTP service area of IAdmin.exe, change the Domain Name Server address field to the local IP address of the newly created DNS service. Do I need to change any MX or A records? Where is this newly created DNS server looking up the DNS records? (Dumb question, I know, but hey.) What are some of the things I need to worry about when doing this? Kevin Rogers wrote: > I received the following email today from Covad - our access > provider. It looks like they have a problem with Declude checking > inbound emails against a realtime blackhole list. (The problem could > also be several emails we've received lately with hundreds of > recipients, many of which were invalid - so it could be the NDR > problem mentioned). > Does anyone know if Declude, setup normally without much modification, > is using more than 1 RBL, or, irregardless of how many it uses, would > it be checking the RBL 12000 times an hour for a mail server that > delivers about 6000 messages a day? Or do you think this most likely > has to do with the too-many-invalid-recipients problem? > > Thanks. Kevin > > MESSAGE FOLLOWS > ------------------------------- > Dear Covad Customer, > > Our records indicate that your computer has made 12497 requests during > the hour we monitored it which accounted for 5.13% of the total > traffic to the Covad nameservers in your region. The high volume of > requests made by your computer to our nameservers causes a degradation > of service for other Covad customers. > > The IP address implicated is: > > XX.XXX.XXX.XXX > > Possible causes for this excessive activity includes, but not limited > to the following reasons: > > -Virus infected computer(s) sending infected emails which causes Covad > servers to receive MX queries for every infected message. > -Computer hosting an open proxy or relay that is being abused by a > spammer. Each outbound email will generate a DNS request. > -Mail server configured to check every inbound email on a realtime > blackhole list (RBL). This could oppose a problem if there are more > than two lists being queried. > -Mail server configured to send a non delivery receipt (NDR) for every > email received at an invalid email address. NDR messages cause Covad > servers to receive DNS requests as well as generate unnecessary > traffic on a customer's network. NDR messages is also a way for > spammers to confirm valid email addresses which could cause mail > servers to receive even more spammed emails. > > --- > [This E-mail was scanned for viruses.] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail was scanned for viruses.] > > > --- [This E-mail was scanned for viruses.] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
