Tools?

[Corey_ironport]

As in cool new toys for us to download from IronPort or as in what tools does the good people of the 'Nation use?

Assuming the latter, here are a few of my personal favorites:
http://groups-beta.google.com/group/news.admin.net-abuse.email
http://www.menandmice.com/cgi-bin/DoDig
http://www.dnsreport.com/
http://www.networksolutions.com/whois/index.jhtml
http://www.dnsstuff.com/

If this isn't the purpose of this forum, we can move it elsewhere. I'd like to see what the rest of you guys use.

[atucker_ironport]

I use http://www.nwtools.com
Of particular use is the email validation tool. It is a great way of checking that your email/dns/firewall is set up correctly.

-Adam

[tminchin_ironport]

we use http://www.spamcop.net to sour the reputation of IP addresses which generate spam that gets through our Brightmail filter.

Also http://www.openrbl.org/ is good for checking out the status of DNS blacklists.

[ian_ironport]

As well as some already mentioned (e.g. dnstuff)

http://www.abuse.net/relay.html - mail relay testing - so you can check you are not an open relay.

[Corey_ironport]

Here's a wizard from Microsoft to help you create SPF records. Not sure how good it is. I've never used it. We had SPF records long before I was aware of this tool. We'll have DKIM set up as soon as our favorite mail gateways vendor implements it. :)
http://www.anti-spamtools.org

[kroeder_ironport]

There are a couple of upcoming contributed IronPort tools which will be posted here in the near future.

It will also be available for a place to discuss ideas, suggestions or thoughts on future directions relating to tools which can be used in conjunction with your IronPort appliance.

[tminchin_ironport]

This site is interesting too - it's a competitor to SenderBase:

http://www.trustedsource.org/

It indicates that spammers are mostly the users of SenderID and DomainKeys too...

[Corey_ironport]

This site is interesting too - it's a competitor to SenderBase:

http://www.trustedsource.org/ 

It indicates that spammers are mostly the users of SenderID and DomainKeys too...

Yeah, I saw this too. Interesting stuff. I'm actually glad that a lot of spammers are using SPF/SenderID and DKIM. It helps us antispammers keep track of them more easily. :)

[tminchin_ironport]

This one is cute too - realtime map of where spam is coming from geographically:

http://www.mailinator.com/mailinator/map.html

[Corey_ironport]

I just found this a couple days ago. It seems to be message board where bulk mailers and antispammers play together. This appears to be much nicer than the NANAE Usenet group with a lot less flaming...so far.

http://www.specialham.com/

[Corey_ironport]

SpecialHam is down and doesn't appear to be coming back. I did receive an email from someone, though, pointing me to a new one: http://bulkerforum.biz
It doesn't seem to be as busy yet, but I just received the email on Friday, so it may pick up soon.

[jpcarna_ironport]

Looks like this topic has been going on for a bit but I just signed up so thought I would put my 2 cents. I am a big fan of DNSReports/Stuff. I post links to good tools on http://www.smtpzone.com ,may be a couple there not listed here and I see a few here I have listed, I will review and add them.

[steven_geerts]

hello,

I just discovered www.robtex.com.

they create great graphics based on your DNS queries and supply al lot of extra info.

Steven