While using the ME management console, I highlighted, in the left hand pane: MailEnable/MailEnable Management/Servers/Connectors/SMTP/Logs/Activity I then selected the "View" drop-down menu. There was a mysterious, empty line in the menu with a check mark beside it. It was below "Detail" and above "...

Here is a description of the two commands directly from the manual. The drop and ban are separate commands with separate thresholds. I'm sorry to disagree, but the two commands have one threshold. From what you quoted: If a connection has reached the disconnection limit, you can also automatically ...

The attack is also not quite as easy as you make it out to be. The attacker would have to know you ran ME. (Not too hard with the default config) You would have to connect 6 times and generate 5 errors each time to get yourself on the ban list for an ip with the default settings. That's not how I r...

Although the best solution is parallel querying of all DNS Blacklists at once (see http://forum.mailenable.com/viewtopic.php?t=7937 ), if the queries are to be done serially, the user should be able to order the queries through the management console (not regedit). The user should be able to select ...

Maybe this has been covered here before, but the function to "Auto-ban the IP address if this number is reached" presents a Denial of Service attack vulnerability. (For those who were unaware, the option mentioned will automatically ban an IP address when X number of bad commands or addresses are re...

Bump!

Anyone?

Mailenable has the ability to blacklist domains from the ME management console: ME -> ME Management -> Messaging Manager -> Post Offices -> {PO name} -> Domains -> {right click on domain name} -> Properties -> Blacklist I tried to blacklist everything in the .tw top-level domain since all that we ge...

1. More configurable logging is being provided to allow you to report on things like RBL lookups, PTR, SPF, etc. This functionality should shortly be available (I think it can actually be enabled in current releases I enabled full logging and it results in a monstrous debug file. Each piece of inco...

When a ptr record (aka "reverse DNS entry") is required for non-authenticated senders, the results of that lookup should be a part of the SMTP activity log and a part of the e-mail headers. That would save time when creating and analyzing abuse complaints.

For blackholes.us lists I would recommend setting up Bind on the server and run the zones yourself - this is much more reliable and you can even set up a custom zone and add your own IP addresses to block. Gareth I've considered that, but I don't know how to set up Bind on a Windows box and really ...

When blocking IP addresses under the SMTP properties, it is not currently possible to specify a range. For example, suppose one wanted to block a problem section of Kornet, a Korean spam haven. With ranges, one could specify: 222.96.0.0 - 222.122.255.255 With MailEnable, as it exists today, one woul...

Problem: IP addresses which are added to the denied IP list (under SMTP properties) have no expiration so they remain denied forever -- or until manually removed. Suggestion 1: The denied IP address list should allow an entry of how many days an IP should stay on the list. ME should automatically pu...

Mailenable administrators need a way to comment IP addresses in their Access Control list (denied IP addresses) and SMTP Whitelist -- especially now that ME can add addresses to the denied list after X number of failed commands or bad addresses. After building up about a dozen entries in each, it's ...

It is possible your email address is being spoofed and you are getting returned to you the bad email addresses. That is outside your system and nothing you can do about that. There is something they can do (if they have not already): Create an SPF record for their domain. Any mail server which chec...

MailEnable checks DNS blacklists in sequential order -- and this is generally fine when there are only one or two blacklists in use. When there are many, such as when specifying multiple countries (China, Nigeria, Korea, Brazil, Malaysia, Taiwan, etc.) from blackholes.us, each blacklist query must t...