NetworkingSophos UTMTech Tips

Sophos UTM Error – Client is listed on DNSRBL black.rbl.ctipd.astaro.local

For example, you maybe publishing OWA via an external IP on your Sophos UTM, your users can no longer connect to OWA when on mobile phones, but can from any other site, it maybe that the mobile providers IP address has been blacklisted.

So you may see the following error’s in the Sophos UTM logs, this will usually show in the reverseproxy.log: file :-

Client is listed on DNSRBL black.rbl.ctipd.astaro.local

This means that the client IP appears on a blacklist, this shows in the log as the “srcip” field. Sophos uses the Cyren database, you can check your IP address at the following URL :-

http://www.cyren.com/security-center/ip-reputation-check

From that page you can also request the blacklisted IP address to be removed, however this should be for the provider to do.

Example From Cyren Checker – Blacklisted IP Address




 

Duncan

Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.