Ok, one thing to test. Hit a command prompt on the exchange server and fire up nslookup. Set the DNS server in nslookup to be the one you show in Cuda. Look up the IP's of the offending email....if you get answers you know Cuda's RBL is answering you.
________________________________________ From: Eldridge, Dave [[email protected]] Sent: Monday, May 18, 2009 8:46 PM To: MS-Exchange Admin Issues Subject: RE: barracuda dnsbl Ninja sits on the exchange server so it is the same ip. I believe I have set this up right with them. I will try to call them tomorrow. Although I don't expect much help with this being a free service. Thanks Jim for the feedback. dave -----Original Message----- From: Kennedy, Jim [mailto:[email protected]] Sent: Monday, May 18, 2009 6:26 PM To: MS-Exchange Admin Issues Subject: RE: barracuda dnsbl Ok, with the direct rbl lookup in Ninja I will bet that it is going out on it's own to do the lookup, and not to your DNS servers for those lookups. So IF you allow your Ninja out on your firewall all you need to do is figure out what IP it is showing to the rest of the world. That is what Cuda will need in the registration form. ________________________________________ From: Eldridge, Dave [[email protected]] Sent: Monday, May 18, 2009 8:25 PM To: MS-Exchange Admin Issues Subject: RE: barracuda dnsbl In ninja I can add rbls directly. In this case I added 2.0.0.127.b.barracudacentral.org I can nslookup this from my exchange server. All of my traffic hits an internal dns which is forwarded to qwest. Which no one sees outside of here. I will have to go back and read how this is supposed to work. Maybe I get lucky with a phone call to them. thanks -----Original Message----- From: Kennedy, Jim [mailto:[email protected]] Sent: Monday, May 18, 2009 6:14 PM To: MS-Exchange Admin Issues Subject: RE: barracuda dnsbl They want the server IP address that is going to talk to them for the DNS lookup. From the fine print at the bottom of the form that you filled out: "Enter the IP addresses of name servers (DNS servers) that will be making queries. Separate each address with a comma." No offense, it is really fine print. You can't use the Quest servers for this, because Quest won't know to ask Barracuda....and they can't because that would mess up everyone else that uses Quest. You need to set up your own DNS server, or tell the Ninja to talk directly to Cuda. I don't have Ninja but I would think you could tell it to do this... ________________________________________ From: Eldridge, Dave [[email protected]] Sent: Monday, May 18, 2009 7:58 PM To: MS-Exchange Admin Issues Subject: RE: barracuda dnsbl I thought they wanted what my exchange server looks like to the world. Qwest hosts our dns records. Is that the name servers they want? I did get an acknowledgement back. -----Original Message----- From: Kennedy, Jim [mailto:[email protected]] Sent: Monday, May 18, 2009 5:42 PM To: MS-Exchange Admin Issues Subject: RE: barracuda dnsbl Did you get confirmation from Cuda that your registration had been accepted. I think they need to authorize your DNS server...your Ninja is doing lookups against the DNS server that you had authorized right? Check the IP address of the sending server's ip address with an nslookup from the DNS server...using baracuda's server for the lookup and see if you get the hit...... ________________________________________ From: Eldridge, Dave [[email protected]] Sent: Monday, May 18, 2009 7:20 PM To: MS-Exchange Admin Issues Subject: barracuda dnsbl Anyone using the free barracuda dnsbl for spam help? I have a very annoying spammer that Ninja partly deals with. I never see any emails but an attachment get quarantined and I get a warning email every time. Lots of them. I can't figure out why the emails get blocked but the attachment and then the warning still gets in. When I use mxtoolbox to check the domain names barracuda is always at the top of the list flagging them. I use spamhaus and others but they don't flag these. Go figure. After registering at barracuda I put the following in my ninja rbl lookups. 2.0.0.127.b.barracudacentral.org. I am still getting these blocked attachment warnings. Am I missing something here? dave This e-mail contains the thoughts and opinions of the sender and does not represent official Parkview Medical Center policy. This communication is intended only for the recipient(s) named above, may be confidential and/or legally privileged: and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please return to sender and delete the message from your computer system. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ This message contains confidential information and is intended only for the intended recipient(s). If you are not the named recipient you should not read, distribute or copy this e-mail. Please notify the sender immediately via e-mail if you have received this e-mail by mistake; then, delete this e-mail from your system. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ This message contains confidential information and is intended only for the intended recipient(s). If you are not the named recipient you should not read, distribute or copy this e-mail. Please notify the sender immediately via e-mail if you have received this e-mail by mistake; then, delete this e-mail from your system. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ This message contains confidential information and is intended only for the intended recipient(s). If you are not the named recipient you should not read, distribute or copy this e-mail. Please notify the sender immediately via e-mail if you have received this e-mail by mistake; then, delete this e-mail from your system. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
