Well, I finally got around to figuring out why the last three Logwatch reports I received from the faceit f12vm were marked as SPAM. Looking at the rest of the logwatch report, I noticed a ton of deferrals from places such as Cox, Midco, USF and yahoo. I read some of the help pages that yahoo linked to and found out that the faceit public IP had been put on the Spamhaus XBL. Checking that list told me that it was on the Abuseat CBL (and who knows where it got there from).
I instructed Scott on how to fix the firewall rules (don't let the workstations access the internet on port 25) and had him submit a removal request.
Fast forward half an hour and we're off the XBL, CBL, but mail is still being deferred - probably a caching issue with the MTAs in question. Will dig a little deeper tomorrow if it's still a problem.
I instructed Scott on how to fix the firewall rules (don't let the workstations access the internet on port 25) and had him submit a removal request.
Fast forward half an hour and we're off the XBL, CBL, but mail is still being deferred - probably a caching issue with the MTAs in question. Will dig a little deeper tomorrow if it's still a problem.
great post, I came to this site like 3 months ago and it looks like a lot has changed since then... Keep up the good work!
Thanks! I didn't think anyone really ever saw this site, but now I have an audience!