Getting your Spamhaus data feeds via Rsync? You may need to move to DQS

What changes have we made?

Enough about burgers. Let’s cut to the chase….

The Spamhaus Rsync service, which synchronizes complete data sets between the Spamhaus servers and local servers on a customer’s network, is now only available to organizations with 50,000+ users, with a minimum US$9,125 spend attached to it.

This service was specifically designed for high usage clients. It is geared towards organizations with large user volume and/or for those wanting to create derivative products from the feeds.

To keep things running as smoothly as possible we require customers who are under the 50,000+ threshold to move to our Data Query Service (DQS).

What is the Data Query Service (DQS)?

The Data Query Service provides customers with real-time access to 70+ Spamhaus mirrors (servers) which are located across the globe. This service uses traditional DNS queries, facilitating easy mail server configuration for customers. You will receive the data feeds in real-time, without any potential delays that may be caused by batch processing or synchronisation issues.

What’s involved in making the move?

Important things first: cost. Per user there is no price difference between the DQS and Rsync service, however please remember that the minimum cost for DQS is US$250 and the minimum cost for the Rsync service is US$9,125!

Naturally, you will need to make some changes to your set-up. But, it will only take a few minutes to configure the data feeds from the DQS…. And if you don’t want to take our word for it, then read Bård Bjerke Johannessen’s comments on making the switch. Bård is Chief Information Officer at SYSE and explained that “Moving from Rsync to DQS involved only minor changes to the configuration of our Exim and SpamAssassin frontends. Quite literary minutes of work.” Bård added that “Performance is not noticeably different and detection rates probably marginally better!”

For customers moving from Rsync to DQS we will enable the DQS to run alongside your current Rsync service. This will provide you with the time, and peace of mind, to test it internally, ensuring you aren’t subject to any service disruption during the change over period. By following this route the Postmaster at the University of Szeged, Mihaly Toth-Abony, ensured the cut over was seamless saying “Our users didn’t notice the move from Rsync to DQS.”

Additional benefits to using the DQS

At this point, we hope we’ve allayed any fears you may have had about the change management associated with moving from Rsync to the DQS. There’s also some good news: you’ll receive additional benefits when you move to the DQS.

• Realtime updates – as soon as a new threat is detected the information is pushed to the DQS mirrors (servers) – with no waiting on batch processing or synchronization delays.
• Speed & continuity – 70+ global mirrors with intelligent routing of queries based on geolocation ensure a robust service.
• Reduce running costs – removes the need for software (RBLDNSD) that consumes the realtime blacklist domain name and related running costs. In Bård from SYSE’s words “This has enabled us to decommission two name servers with the associated monitoring and management, as well as the monitoring and management of the rsync-jobs.”
• Free Zero Reputation Data (ZRD) feeds – customers consuming our Content blocklists (DBL, Hash and ZRD) can receive data feeds relating to newly observed domains at no additional cost.
• Access to AuthBL feed – get protection against IP addresses associated with ‘brute force’ entry and form abuse, part of our IP Blocklists.

Our team are on hand for any questions you may have relating to the move – drop them a line either via this contact form or email your customer service contact.

Thanks for your patience!