How can we improve Kerio Connect?

cache blacklist

Hi,

For each mail, KC checks the blacklists even when a blacklisted server tries to deliver mail in a view seconds.

See below

[09/Dec/2011 16:13:06] IP address 186.208.179.90 found in DNS blacklist SpamCop, mail from <0-u@telepak.net> to <*****>
[09/Dec/2011 16:13:06] IP address 186.208.179.90 found in DNS blacklist http://cbl.abuseat.org/, mail from <0-u@telepak.net> to <********> rejected
[09/Dec/2011 16:13:11] IP address 186.208.179.90 found in DNS blacklist SpamCop, mail from <0-wp@carnival.com> to <*******>
[09/Dec/2011 16:13:11] IP address 186.208.179.90 found in DNS blacklist http://cbl.abuseat.org/, mail from <0-wp@carnival.com> to <********> rejected
[09/Dec/2011 16:13:15] IP address 186.208.179.90 found in DNS blacklist SpamCop, mail from <0--vhodges@vhebron.net> to <********>
[09/Dec/2011 16:13:15] IP address 186.208.179.90 found in DNS blacklist http://cbl.abuseat.org/, mail from <0--vhodges@vhebron.net> to <********> rejected
[09/Dec/2011 16:13:19] IP address 186.208.179.90 found in DNS blacklist SpamCop, mail from <0-uy@cancer.org> to <***********>
[09/Dec/2011 16:13:19] IP address 186.208.179.90 found in DNS blacklist http://cbl.abuseat.org/, mail from <0-uy@cancer.org> to <***********> rejected

If you cache these ipaddresses for 2 hours or so it wil speed up things.

2 votes
Vote
Sign in Sign in with GFI
Signed in as (Sign out)
You have left! (?) (thinking…)
Ronald Otto shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

2 comments

Sign in Sign in with GFI
Signed in as (Sign out)
Submitting...
  • Ronald Otto commented  ·   ·  Flag as inappropriate

    A DNS query in two DNS servers (in this case) is never as fast as a DB lookup and blacklist usualy have a short TTL.
    In stead of checking the ipaddress and do a query KC can chack the ip address against a local db.

    So if an ip address is blocked once due to blacklisting, don query all the DNS servers. See the unneeded queries in my axample.

Feedback and Knowledge Base