Recently I have been seeing random spammy referral links showing up in my analytics with 100% bounce rates. These referral links are from sites with absolutely no relevance to my site or industry. I used my hosting provider to assist with a malware cleanup and blacklist removal. The malware cleanup returned no malicious content within my file structures. I am seeing my domain/IP showing up on the Barracuda and Spamhaus blacklist. I was informed that these listings are all email blacklists, which is not covered by the malware & blacklist removal service. The malware & blacklist removal only covers removal from website, malware blacklisting. Currently my hosting provider does not offer any assistance with delisting from email (RBL) blacklists. This is fine. Not a big deal but I was trying to understand this a bit more.
How do I tell the difference between a site or ip blacklist vs an email blacklist?
I plan on contacting the RBL's for removal but I want to make sure that this doesn't happen again and prevent any future potential compromises. I was also looking into Fail2Ban or creating custom Firewall rules. Is there a preference or any suggestions on Fail2Ban vs a custom Firewall?
Any help would be appreciated. Thanks!
How do I tell the difference between a site or ip blacklist vs an email blacklist?
I plan on contacting the RBL's for removal but I want to make sure that this doesn't happen again and prevent any future potential compromises. I was also looking into Fail2Ban or creating custom Firewall rules. Is there a preference or any suggestions on Fail2Ban vs a custom Firewall?
Any help would be appreciated. Thanks!