ASA5505 and DNSBL

Is there a way to configure an ASA5505 to use a DNSBL such as Spamhaus to deny inbound access? I'm familiar with the DROP list at Spamhaus, I'm more interested in the lists like zen.spamhaus.org.
Petek0956Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Texas_BillyCommented:
No, the ASA won't understand that.  You'll need an smtp gateway of some kind for that.  What mail server are you using?  If you're on Exchange 2007 or better, the built in spam blocking feature(s) will allow you to query RBLs, and I've found them to work great.  Exchange 2003 IMF never seemed to do any good at all, but adding zen.spamhaus.org to Exchange 2007 works a treat, I've found.

If that's not an option, check out Cuda Mail.  www.cudamail.com   They're a hosted spam filtering solution, very inexpensive and quite reliable.  I like them a lot - I've had much better success with them than with Postini.  MXLogic used to be a really good one too, but now they're owned by McAfee, so be very afraid.  --TX
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Petek0956Author Commented:
Thanks for the confirmation. I'm familiar with all the services you mentioned. We are using zen on our MTA. What we're trying to do is shift some of the 'defense' load to the ASA. Our MTA understands both DNSBLs and spamassassin. The way we use some other features of the MTA, it I know we're letting some zen-listed IPs through (its just the way this system works). I'd like to have the system prioritize DNSBL decisions, but that's unfortunately not the case. Thanks again.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.