RBL Configuration

A RBL (Real Time Block List) is a mechanism for determining the reputation of a sender IP address by looking up the sender IP through various RBLs that are configured in the system. RBL lookups are performed using DNS. The reputation of an IP is determined by assigning a score to a sender IP address. The higher the score, the lower the reputation. Once a certain score threshold is reached, the sender IP address is not allowed to send email to the system. The RBL threshold score is configured under Content Checks --> Perimeter Checks --> Realtime Block/Allow Lists Threshold Score.

There are two types of RBLs configured in Hermes SEG; Block type and Allow type. Block type RBLs are assigned a positive integer for weight and allow type RBLs are assigned a negative integer for weight.

Each RBL added to the system is assigned a weight based on the perceived effectiveness of that particular RBL. Each time a sender IP is matched against a RBL, a score is assigned to that IP depending on the weight of that RBL. For example, if a sender IP address matched against a block type RBL with a weight of 3 and also matched against a block type RBL with a weight of 1, but then matched against an allow type RBL with a weight of -1, then the RBL score for that IP address would be 3. So, if the RBL threshold score configured is 4, then that sender IP would be allowed to deliver email since sender IP reputation of 3 is lower than the RBL threshold score of 4.

The are many RBLs in existence today varying in degree of effectiveness and reputation. Thus which RBLs you choose to use can make a big difference in the effectiveness of Hermes SEG to identify IPs with poor reputation.

The following is a list of RBLs we can recommend:

Block Type RBLs

• zen.spamhaus.org
• b.barracudacentral.org --> Requires registration at http://barracudacentral.org/rbl
• bl.mailspike.net
• bl.spamcop.net
• dnsbl.sorbs.net
• psbl.surriel.com
• bl.spameatingmonkey.net

Allow Type RBLs

• list.dnswl.org
• wl.mailspike.net

Add Realtime Block List

1. Under the Select the type of entry... ensure Block List is selected.
2. Under the Block List field, enter the block list host name.
3. Under the Weight field enter a positive integer to assign as a weight to this RBL (if you do not enter a weight, a weight of 1 will be automatically assigned).
4. Click the Add button (Figure 1).

Figure 1

5. Each RBL entry you add shows up in the Realtime Block/Allow List(s) to be added section (Figure 2).

Figure 2

6. Continue adding RBL entries as needed. When finished, click on the Apply Settings button on the bottom of the page (Figure 3).

Figure 3

Add Realtime Allow List

1. Under the Select the type of entry... ensure Allow List is selected.
2. Under the Allow List field, enter the allow list host name.
3. Under the Arguments field, enter any arguments for the allow list if required.
4. Under the Weight field enter a negative integer to assign as a weight to this RBL (if you do not enter a weight, a weight of 1 will be automatically assigned which will in effect invalidate the allow list so ensure you enter a negative integer).
5. Click the Add button (Figure 4).

Figure 4

6. Each RBL entry you add shows up in the Realtime Block/Allow List(s) to be added section (Figure 5).

Figure 5

7. Continue adding RBL entries as needed. When finished, click on the Apply Settings button on the bottom of the page (Figure 6).

Figure 6

 

Delete RBL

1. Under the Delete Realtime Block/Allow Lists section, select the entry you wish to delete and click the Delete button below (Figure 7). Note that only one entry can be selected to be deleted at a time.

Figure 7

2. Each entry you select to be deleted shows up in the Permitted Relay IPs/Network to be deleted section (Figure 8).

Figure 8

3. Continue selecting entries to be deleted as needed. When finished, click on the Apply Settings button on the bottom of the page (Figure 9).

Figure 9