[rbldnsd] starting out with rbldnsd: all is REFUSED

[David Landgren]

List,

I have djb's rbldns up and running, but I want to make the switch to 
rbldnsd, most notably for per-address TXT records and to run an rhsbl 
as well.

So I install 0.99, set up two little datafiles:

2.data:

#$SOA 3600 dnsbl.bpinet.com postmaster.bpinet.com 2003101500 3600 1800 
1209600 86400
#$NS 3600 ns.dnsbl.bpinet.com
#$TTL 3600
:127.0.0.2:blacklisted by dnsbl.bpinet.com (spam/proxy) $
127.0.0.2    loopback test address - do not use!
61.4.64.0/20 blackholed .cn netblock $

5.data
#$SOA 3600 dnsbl.bpinet.com postmaster.bpinet.com 2003101500 3600 1800 
1209600 86400
#$NS 3600 ns.dnsbl.bpinet.com
#$TTL 3600
:127.0.0.5:spamhaus $
.sendmebargains.com
.sendmeoffers.com

I start rbldnsd with

rbldnsd -u dns:dns -r /home/dns/dnsbl -b 81.80.147.196/20053 -c 15m -p 
/var/run/rbldnsd.pid -l rbldnsd.log 127.0.0.2:ip4set:2.data 
127.0.0.5:dnset:5.data

I must be missing something, because all queries are being refused. 
I'm using dig, to be be able to query on the non-standard port 
(incidentally the port is open from the outside for the time being, if 
that will help with the diagnosis):

dig -p 20053 @81.80.147.196 2.0.0.127.dnsbl.bpinet.com A

; <<>> DiG 8.3 <<>> -p @81.80.147.196 2.0.0.127.dnsbl.bpinet.com A
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 4
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;      2.0.0.127.dnsbl.bpinet.com, type = A, class = IN

;; Total query time: 0 msec
;; FROM: sterec.bpinet.com to SERVER: 81.80.147.196  81.80.147.196
;; WHEN: Wed Oct 15 12:33:07 2003
;; MSG SIZE  sent: 44  rcvd: 44

And in the rbldnsd.log file I see

1066213126 81.80.147.196 2.0.0.127.dnsbl.bpinet.com A IN: REFUSED/0/44

One other question, for the record .sendmeoffers.com do I test that 
with com.sendmeoffers.dnsbl.bpinet.com or 
sendmeoffers.com.dnsbl.bpinet.com . The documentation isn't clear on 
the matter (or I can't read documentation, a distinct possibility).

I'm evidently missing something basic, but I don't know what. Any 
pointers gratefully received.

Thanks,
David Landgren