Hi,
Does anyone know how I can monitor our server's for blacklisting? We run a large amount of shared hosting & reseller hosting servers and from time to time one of the IP's will get blacklisted. I'm looking for a way to be notified if any of our IP's get blacklisted. Is this possible?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
thus Rudi Ahlers spake:
Hi,
Does anyone know how I can monitor our server's for blacklisting? We run a large amount of shared hosting & reseller hosting servers and from time to time one of the IP's will get blacklisted. I'm looking for a way to be notified if any of our IP's get blacklisted. Is this possible?
Hi,
do you run nagios? I have a script running here to get notified in case we're blacklisted.
The German ``iX Magazin'' (focused on Unix) had some nice stuff, too:
http://www.heise.de/netze/artikel/Verdrehte-Abfrage-223890.html
The article itself is in german, the scripts are not. You can run the one mentioned (URL above) as a cron job and receive an email in case you're blacklisted somewhere.
Maybe this is a good start.
HTH,
Timo
Rudi Ahlers wrote:
Hi,
Does anyone know how I can monitor our server's for blacklisting? We run a large amount of shared hosting & reseller hosting servers and from time to time one of the IP's will get blacklisted. I'm looking for a way to be notified if any of our IP's get blacklisted. Is this possible?
You could manually check your IP address(es) here:
Alternatively, just read your logs (or write a simple script to parse them for you). You'll receive a 5xx rejection and usually a reason/URL from the main blacklists whenever you are blocked.
If you're using postfix as your MTA, check out pflogsumm.
On 03/12/2010 04:19 AM, Rudi Ahlers wrote:
Does anyone know how I can monitor our server's for blacklisting? We run a large amount of shared hosting& reseller hosting servers and from time to time one of the IP's will get blacklisted. I'm looking for a way to be notified if any of our IP's get blacklisted. Is this possible?
get yourself registered on feedback loops. aol, comcast, earthlink, usa.net, and maybe some others offer this. then you'll get copies of email they consider to be spam. by using them as early warning systems, you can avoid getting on the blacklist in the first place. also, make sure you have a valid email address set on your ip whois info so that abuse messages can get to you. get registered with abuse.net. basically do as much as you can so that you're aware of what complaints are being generated and can shut off abusers more quickly.
robtex.com is a good site to use to check for blacklist entries. you might be able to run a wget via cron to watch things daily.