Home > Microsoft Exchange Tips > Exchange Security Tips > Optimize your DNS blacklists with BL-Monitor
Exchange Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

EXCHANGE SECURITY TIPS

Optimize your DNS blacklists with BL-Monitor


Serdar Yegulalp
01.16.2006
Rating: -4.00- (out of 5)


Exchange Server tips, tutorials and expert advice
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


Please let others know how useful this tip is via the rating scale at the end of it. Do you have a useful Exchange or Outlook tip, timesaver or workaround to share? Submit it to our tip contest and you could win a prize.


DNS blacklists are used by big Internet Service Providers and independent users alike to determine if incoming e-mail is from a spammer or spam-friendly server. They're also used to list the addresses of servers that may have been compromised by spammers as third-party spam relays.

Blacklists have a sometimes dicey reputation among e-mail administrators, however, for a couple reasons. First, they're not always accurate. Some innocent parties get blacklisted along with the guilty. Second, they're fickle. A blacklist server you were using a week ago may get shut down for no reason other than the person running it decided not to bother anymore.

The first issue is an inherent one with blacklists, and for that reason they should be used as one element among many when dealing with spam. The second issue, fortunately, can be dealt with a lot more directly thanks to a utility called BL-Monitor.

BL-Monitor, provided free by Computer Mail Services, queries a customizable list of DNS blacklist servers at regular intervals and returns detailed, graphically formatted statistics about how well each blacklist server is performing.

The resulting data is ranked according to various criteria -- number of addresses blacklisted, average response time, and so on. From this, it becomes easier to determine which blacklist servers are the most responsive, are returning the most useful information, or both.

BL-Monitor does not require the presence of an e-mail server of any kind; the only requirement is the .NET Framework, 1.1 or greater, and an Internet connection. This is both an advantage and a disadvantage, since it doesn't use IP addresses from live e-mail traffic to do its testing.

The IP addresses used to test the blacklists can be supplied in a plain text file, but this shouldn't be difficult to extract from existing logs. (Computer Mail Services also has a separate e-mail management product called Praetor that can feed IPs directly to BL-Monitor, but most people will probably want to use BL-Monitor in a standalone context.)

About the author: Serdar Yegulalp is editor of the Windows Power Users Newsletter.


Do you have comments on this tip? Let us know.
Related information from SearchExchange.com:

  • Learning Guide: Spam
  • Learning Center: The spamfighter's toolbox
  • Geek Speak Quiz: In the spammer's lair
  • Reference Center: Spam prevention and management



    Rate this Tip
    To rate tips, you must be a member of SearchExchange.com.
    Register now to start rating these tips. Log in if you are already a member.


    Submit a Tip




    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



    RELATED CONTENT
    Exchange Security Tips
    Is full email encryption the solution to Exchange security?
    Lock down direct file access and protect OWA users
    Controlling spam in Exchange 2007 at the edge transport server level
    When to use a self-signed certificate with Exchange Server 2007
    Obtaining and verifying SSL certificates in Exchange Server
    How file-level antivirus software can harm your Exchange Server
    Understanding Exchange Server 2007 SP1 mobile security settings
    Which ActiveSync authentication method is best for your mobile device?
    Why you should secure Exchange 2007 using administrative policies
    Microsoft Exchange Server security dos and don'ts

    Spam and virus protection
    Controlling spam in Exchange 2007 at the edge transport server level
    How file-level antivirus software can harm your Exchange Server
    Problems with email spoofing on SBS 2003
    Exchange Insider e-zine
    Securing your Exchange Server 2007 journaling archives
    Troubleshooting Outlook Web Access issues on a 64-bit system
    Microsoft Exchange Server security dos and don'ts
    Troubleshooting Microsoft Exchange Server Event ID error 6009
    How effective is tracking the IP address of an email hacker?
    How can I configure Exchange IMF to allow an IP address or DNS?
    Spam and virus protection Research

    Microsoft Exchange Server Administration Tools
    An introduction to the Exchange Remote Connectivity Analyzer tool
    Prevent Microsoft Outlook 2007 from hanging when forwarding email
    Testing Unified Messaging connectivity in Exchange 2007
    Microsoft Exchange Server 2007 performance tutorial
    How to custom-configure a Microsoft Outlook 2007 install using OCT
    Top Exchange Server performance monitoring and troubleshooting tools
    Search and index Microsoft Outlook 2007 public folders
    Executing an .MSP customization file in Microsoft Outlook 2007
    Using the NTBackup tool for Exchange Server backup and recovery
    Tools to bulk modify Active Directory users in Exchange Server 2003
    Microsoft Exchange Server Administration Tools Research

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    greylist  (SearchExchange.com)
    hash buster  (SearchExchange.com)
    image spam  (SearchExchange.com)
    KnujOn  (SearchExchange.com)
    Sender ID  (SearchExchange.com)
    spam confidence level  (SearchExchange.com)
    spamblock  (SearchExchange.com)
    spim  (SearchExchange.com)
    tarpitting  (SearchExchange.com)
    teergrube  (SearchExchange.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary

    DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



  • Email Server Solutions: Exchange 2007, Exchange 2003, Exchange 2000, SharePoint
    HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT Downloads
    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    SEARCH 
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2004 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts