[rbldnsd] rblsmtpd and rbldnsd
Brian
bcook-rbldnsd at poklib.org
Wed Apr 7 19:00:15 MSD 2004
Strange question..
If I have a composite block list from other block lists, and an IP is
listed on more than one of these base block lists I get entries like
this in my qmail smtpd logs:
@400000004074154c04f9b45c rblsmtpd: 68.95.137.117 pid 90877: 553
http://www.spamhaus.org/query/bl?ip=68.95.137.117http://dsbl.org/listing?ip=68.95.137.117
and if the are really bad :)
@40000000407415af0eb22f24 rblsmtpd: 68.50.127.73 pid 91204: 553
http://www.spamhaus.org/query/bl?ip=68.50.127.73http://dsbl.org/listing?ip=68.50.127.73SOCKS
Proxy See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=68.50.127.73
Obviously if I were to give access to these individual dnsbls I would
get rejected at the first match.
But just wondering from a performance stand point, if I do that, then
even though the mail server only has one hop to go, it would be going
there for a.blocklist then b.blocklist.. n.blocklist..
is there some option that says 'just return the first match' or would my
best bet (in looking for a clearly formed email to be sent back to the
spammer) be to query each block list blocking on a first come first
serve basis.. or does it not matter so much?
As I'm not sure how rblsmtpd is sending these messages back to the
originating MTA it looks like to me the person would be getting back one
big jumbled string of text.
If I'm making a mountain out of a mole hill just say so :)
Not a problem at the moment I can just forsee it being one.
Clues appreciated.
- Brian
More information about the rbldnsd
mailing list