SpamRATS

Configuring SpamRATS on Communigate

How to configure SpamRATS RBLs on Axigen MTA

In the Communigate PRO mail server, the SpamRATS RBL protection can be configured through the Admin interface:
http://:8010 Make sure you log in as 'postmaster' or a user with admin rights.

After accessing the Admin Interface, Navigate to Settings -> Services -> SMTP -> Security.. Look for DNS Blacklists and check 'Enable DNS Blacklists'

In the RBL Configuration, add the RBL's you want to use one item per line.

      [YOUR_API_KEY].spam.spamrats.com
      [YOUR_API_KEY].dyna.spamrats.com
      [YOUR_API_KEY].noptr.spamrats.com
  

You can choose to Reject, Tag, or Log Only. Remember to commit and then test. Normally though, we want to make sure that ONLY the correct response is treated as being on the list. For instance, 127.0.0.36 for RATS-DYNA. Any other IP returned should NOT be treated as being on the list. It could be a rejection error.

Using SpamRats RATS-AUTH to prevent Email Compromise

(INFORMATION MISSING, Please help out). Everyone should use RATS-AUTH to protect their authentication layers, including POP/IMAP/SMTP(25,465,587) and WebMail. You can even use it to protect other logins on your server.

Warning: Please remember that you MAY not be able to query from some DNS servers, especially without an API key. You should use a DNS servers that clearly identifies who is making the query (PTR Record). Consider using your own local resolver if you have troubles. With a subscription, there are alternative ways to get data.

Caveats and Testing that it Works

RBL's work using DNS, and you should ALWAYS look for the correct IP Address being returned. Simply getting a "result" doesn't always mean the IP is listed. It should return the specific IP address, anything else might mean an error, and should be ignored and NOT rejected. Also, your DNS needs to be able to correctly query our mirrors. Bad firewall rules that prevent you from reaching our mirrors, means that you are not protected. You can always test at the command line first. A simple..

  host 36.0.0.127.[YOUR_API_KEY].dyna.spamrats.com
  host 1.0.0.127.[YOUR_API_KEY].dyna.spamrats.com
  

.. the first example should work and return 127.0.0.36, while the second example should return NXDOMAIN. (IP Not found). If that doesn't work, check your firewalls first, and check which DNS servers you are using, and finally test/check your API key is correct, and active before reaching out to us for support.

Blocked Users

You may find that your ability to query the SpamRATS DNSBL Public Mirrors has been restricted. This could be due to the usage not falling within our Terms of Service. Before restricting any queries we try to reach out via email. Please check to see if you received an email from sales@mthreat.com at your public email address. If you have received the message, please reply to it.

If you would like to continue using the SpamRATS RBLs, please contact us and include the IP(s) that you used to query in your email.

Go back to Usage page


Many thanks to our Sponsors, Subscription Holders, Users and Contributors.