How do I test RBL functionality using MAPS?

Issue

How do I test RBL functionality using MAPS?

MAPS (mail-abuse.org) is a subscription-based RBL provider. For more information on the services provided and how to subscribe, see https://ers.trendmicro.com/.

Solution

To test RBL functionality using MAPS, do the following:

1. Add MAPS as an RBL host to your server. Use the following command:

Smtp Addrblhost hostname

Where hostname is the valid internet address for MAPS.

2. Enable RBL lookup for senders. Use the following command:

Smtp Set Rbl On

3. Set the RBL handling to reject the message and send a bounced message to the sender. Use the following command:

Smtp Set Rblhandling Bounce

To test your RBL block, see http://www.crynwr.com/spam/.

This test is only useful when using MAPS, and does not tell you if your server is open for relaying. Instead, it tests to see if your server blocks email from IP addresses listed in various blocking lists, in this case, the RBL list.

As of Release 3.4, the Administration Suite can be used to add RBL hostnames. From the Home page, navigate to Anti-Spam > RBLHost List (see the online help for more information on adding RBL hostnames).

Example 1

In the following example, the mail delivery is refused:

Connected to 208.48.74.4

220 testdrive.mirapoint.com ESMTP Mirapoint 1.1.0; Thu, 16 Nov 2000

09:04:18 -0800 (PST)

helo linux.crynwr.com

250 testdrive.mirapoint.com Hello linux.crynwr.com [192.203.178.39],

pleased to meet you

mail from:<>

571 <>... Mail from 192.203.178.39 refused, see http://mail-abuse.org

Terminating conversation

Example 2

In this example, the following command has been set:

Smtp Set Rblhandling Header

The message is filtered by the server-side filters, and the mail is delivered to the recipient mailbox with a header that contains the information "X-JunkMail: RBL."

Return-Path: <MAILER-DAEMON@testdrive.example.com>

Received: from linux.crynwr.com (linux.crynwr.com [192.203.178.39])

by testdrive.example.com (Example) with SMTP id AAC00046;

Mon, 13 Nov 2000 10:51:44 -0800 (PST)

X-JunkMail: RBL

From: nelson@crynwr.com

To: jdoe@testdrive.example.com

Date: Mon, 13 Nov 2000 18:52:16 -0000

Message-Id: <974141536@linux.crynwr.com>

Uh-oh, your RBL block is not working!

Note the following with regard to RBL activity logged in daily and weekly reports:

• No log mentions whether RBL is on or off.
• If the rblhandling bounces the message, the detailed SMTP log indicates the action taken. The log indicates if the action taken was associated with RBL. If mail from <source> was refused, see: https://ers.trendmicro.com/.
• If the RBL handling is through the header, there is no trace of any RBL activity in any logs, but the header contains the information "X-JunkMail: RBL."