Explanation of Marshal IP Reputation Service test results

This article applies to:

• Trustwave MailMarshal (SEG) 6.7 and above
• Marshal IP Reputation Service

Question:

• Marshal IP Reputation Service test fails
• Cannot add the Marshal IP Reputation Service
• Results of testing the Marshal IP Reputation Service

Information:

The Marshal IP Reputation Service is implemented as a DNS based list (similar to Spamhaus and Spamcop)

In order for MailMarshal to use the Reputation Service, the MailMarshal processing nodes must be able to perform DNS queries to the Marshal IP Reputation Service domain rbl.marshal.com

These queries use the DNS servers specified in the MailMarshal configuration.

Testing the service

When you use the Test button on the Reputation Service wizard in the configurator, MailMarshal performs two tests:

1. Attempts to resolve the domain rbl.marshal.com
2. Attempts to send a query to the service

This section lists the possible results and the corresponding messages returned by MailMarshalSMTP.

Notes:

• Many of the message wordings are similar. The exact wording of the message is important for debugging purposes.
• The test runs from the Array Manager. If the DNS servers configured for MailMarshal are not available from this location, the result of the test may be inaccurate.

1. Test to resolve the rbl.marshal.com domain
   1. Success:
      • No message is returned. Testing continues with test 2 below.
   2. DNS No Host (NXDomain, non-existent domain), or DNS No Data:
      • Unable to resolve the Marshal IP Reputation Service domain: rbl.marshal.com. Please check your MailMarshal DNS settings are correct.
   3. DNS Error:
      • DNS Error. Unable to resolve the Marshal IP Reputation Service domain: rbl.marshal.com. Please check your MailMarshal DNS settings are correct.
   4. DNS Temp Fail:
      • DNS Error. Temporarily unable to resolve the Marshal IP Reputation Service domain: rbl.marshal.com. Please check your MailMarshal DNS settings are correct.
   5. Other errors:
      • Unknown error: {error text}. Unable to resolve the Marshal IP Reputation Service domain: rbl.marshal.com. Please check your MailMarshal DNS settings are correct.
2. Test query to the service 2.0.0.127.rbl.marshal.com
   1. Success (1.0.0.127 is returned as an A record from rbl.marshal.com):
      • Successfully validated your credentials and connectivity.
   2. DNS No Host (NXDomain, non-existent domain), or DNS No Data:
      • MailMarshal was able to contact the Marshal IP Reputation Service server, but customer id or activation code may not be valid. Please allow up to 4 hours for our servers to synchronize.
   3. DNS Error:
      • DNS error. Unable to contact the Marshal IP Reputation Service server. Please check your MailMarshal DNS settings are correct.
   4. DNS Temp Fail:
      • DNS error. Temporarily unable to contact the Marshal IP Reputation Service server. Please check your MailMarshal DNS settings are correct.
   5. Lookup success but product key/codes are not valid:
      • Invalid Activation code.
   6. Other errors:
      • Unknown error: {error text}.

Notes:

To manually verify DNS connectivity and send a test query, you can use the Windows NSLookup facility.

• To test from the DNS server you have set in MailMarshal, specify it using the NSLookup SERVER command.
• Perform a lookup for the following host: 2.0.0.127.rbl.marshal.com
• The A record result should be: 2.0.0.127