Block list service provider must be identified.

From Exchange 2010 Edge Transport Server STIG

SV-44053r2_rule Block list service provider must be identified.

Vulnerability discussion

Block List filtering is a sanitization process performed on email messages prior to their arrival at the destination mailbox. By performing this process at the email perimeter, threats can be eliminated outside the enclave, where there is less risk they can do harm. Block List Services (sometimes called Reputation Data Services) are fee based data providers that collect the IP addresses of known SPAMmers and other malware purveyors. Block List Service Subscribers benefit from more effective SPAM elimination, which has been estimated as comprising up to 90% of inbound mail volume. Failure to specify a Block List provider risks that manual email administration effort would be needed to maintain and update larger block lists than a single email site administrator could conveniently or accurately maintain. The 'Block List' Services vendor provides a value for this field, usually the DNS suffix for their domain.

Check content

Access the EDSP for the name and information for the Block List provider. Open the Exchange Management Shell and enter the following command: Get-IPBlockListProvider | Select Name Identity LookupDomain If the values for Name, GUID and LookupDomain are configured, this is not a finding.

Fix text

Open the Exchange Management Shell and enter the following command: Set-IPBlockListProvider -Name [Additional optional parameters as required by the service provider] Document the configuration in the EDSP.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.