Thanks Bill for the lead, this was the problem. My client had manually put 4.2.2.2 into their DNS forwarder. Once I removed it, cleared dns cache Im getting TRUE results..
Appreciate the tip! From: Bill Songstad [mailto:[email protected]] Sent: Wednesday, April 27, 2011 2:14 PM To: NT System Admin Issues Subject: Re: Spamhaus Lookup Many public DNS servers don't reply correctly about lookups at spamhaus. Make sure you are getting your DNS info from your ISP, and not the free public servers. (e.g. 8.8.8.8, 4.4.2.2. etc...) Bill On Wed, Apr 27, 2011 at 11:08 AM, Level 5 Lists <[email protected]<mailto:[email protected]>> wrote: Yes, we are using multiples , when I test a few of the known IP's from Spamhaus it fails all lookups, which is why I think its not working at all. Spamhaus was the one I was testing independently, and sending the email test, and the ip lookup test from exchange shell results in false (no response) even though Spamhaus says its listed. Im testing some of the other agents now just to see if any of them are functioning. I also signed up for the free Barracuda RBL to try that one too. Thanks -----Original Message----- From: Bob Fronk [mailto:[email protected]<mailto:[email protected]>] Sent: Wednesday, April 27, 2011 1:37 PM To: NT System Admin Issues Subject: RE: Spamhaus Lookup Relying on RBL alone is not a sufficient way to combat SPAM. I use multiple RBLs, RWLs, Vipre and Barracuda. -----Original Message----- From: Level 5 Lists [mailto:[email protected]<mailto:[email protected]>] Sent: Wednesday, April 27, 2011 1:11 PM To: NT System Admin Issues Subject: Spamhaus Lookup Tried to put this on exchange list, but keeps saying no attachments .. thought I would try it here: ---------------------------- Exchange 2010 SP1 . We dropped anti-spam and put spamhaus and spamcop on and enabled. We are still seeing a lot of junk coming through, I went in to test spamhaus and no matter what I do the mail passes. I sent a test email to their system and it didn't reject it. When I do a ping or nslookup on zen.spamhaus.org<http://zen.spamhaus.org/> I get nothing in DNS. I tried a couple of external DNS servers with the same results. Im on Spamhaus' site and don't see anything about them being down... a couple of other providers seem to be working ok (I can at least ping/nslookup) the server. Maybe Im doing something incorrect: I added the filter, did zen.spamhaus.org<http://zen.spamhaus.org/>, said for any response code (I didn't bother setting the different codes for now) ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
