Support for the TLSA record has been added to the Primary DNS service.
We’ve also streamlined up the display for SSHFP records in this update.
Categories
Category: Changes
Categories
Control Center Updates
We’ve made a few minor updates to the account control center in preparation for a major update to the account profile section, which will include a new way of selecting service levels for Mail and DNS accounts that we intend to be less confusing than the current method.
- New mail filtering option: Sender IP Reputation
- New mail message handling option: enable or disable attachment extension checks under Message Handling Options.
The main login screen has also changed slightly: there’s an additional field for a YubiKey OTP. This two factor authentication method is currently in early testing, so if you have a YubiKey and want to add it to your account, please contact us with your 12 character key ID and account name. Up to two keys are supported at this time. If you don’t have a YubiKey, leave this third field blank and the normal login process with password-only remains unchanged. Once you have a YubiKey associated to your account you must use it to log in.
We’ve made a couple minor updates to the Secondary DNS system.
- If we see a successful transfer, the back end will automatically send an “enable” flag to the account control center. This addresses a possible condition where a zone can become disabled between update runs due to an error that was fixed before the next run.
- Secondary DNS zones will be automatically disabled if a NOTAUTH (not authoritative) response is received from the configured master. This is similar to the existing behavior of disabling on a REFUSED response. Our system must assume that if the master is not authoritative for a zone that we must not try to be a secondary, and it wastes resources to keep trying.
Categories
Shutdown of virbl.dnsbl.bit.nl
From virbl.bit.nl
Virbl was a project of which the idea was born during the RIPE-48 meeting in May 2004. The plan was to get reports of virusscanning mailservers and put the IP-addresses that were reported to send viruses on a blacklist. Since the start, a number of trusted notifiers participated and over the next 10 years Virbl was a great addition to fighting back virus mails on the internet.
However, the internet changed, the techniques used to filter virus mails changed, trusted notifiers stopped reporting about incoming virusses and Virbl became more and more obsolete. This prompted us to decide to ‘pull the plug’ on the project after 12 years of operation.
The Virbl-project site has been replaced by this static message to inform those that find their ways here. The Virbl DNSBL-zone was emptied and will be removed all together at a moment further on in the future. Please remove any DNSBL-lookups against ‘virbl.dnsbl.bit.nl’ from your e-mail configurations. AS-operators will no longer receive the so called ‘Virbl AS-reports’ and it will no longer be possible to look up evidence. Mail sent to the ‘virbl.bit.nl’ domain will be tossed in the endless vacuum called /dev/null.
Please remove any DNSBL-lookups against ‘virbl.dnsbl.bit.nl’ from your e-mail configurations.
Accordingly, we have removed all entries for “virbl.dnsbl.bit.nl” from DNSBL configurations.
We’re adding Cloudmark Authority back into our system for mail filtering. The CMAE_1 rule for SpamAssassin will return and new features for the account control center will be developed. (See our previous announcement here.)
The difference this time around is that we’re not using a SpamAssassin integration. We’re integrating it directly into our content filtering module which is account control center aware and SpamAssassin is configured to look for the presence of a header added if a message is determined to be spam.
More updates to come.
UPDATE (Dec. 23, 2016): Scoring is now enabled. The CMAE_1 rule is currently configured with a score of 1 if detected as spam and X-CMAE-* headers will be added for all messages. We may change the default score in the future. You can adjust the CMAE_1 score in the SpamAssassin preferences section of the control center, if desired.