[rbldnsd] Exclusion entry in ip4set not working

[Mark Jones]

Hello,

I have blended a third-party public RBL list with my own additions and
exclusions, for my own private use. For now, this is all in one file,
which is loaded into rbldnsd as ip4set zone "dynamic.bl.netins.net".
When I start rbldnsd, I get no errors or warnings of problems.

The file includes these lines:

216.51.152.1/32
216.51.152.2/31
216.51.152.4/30
216.51.152.8/29
216.51.152.33/32
216.51.152.34/31
216.51.152.36/30
216.51.152.40/29
216.51.152.48/29
216.51.152.56/30
216.51.152.60/31
216.51.152.62/32

and toward the bottom is my own addition, a large exclusion:

!216.51.128.0/17

Shouldn't queries for any IP in 216.51.128.0/17 result in NXDOMAIN? If
so, that is not happening. For example, 216.51.152.10:

$ dig @127.0.0.1 -p 530 10.152.51.216.dynamic.bl.netins.net a
(rbldnsd is running on port 530)

; <<>> DiG 9.2.4 <<>> @127.0.0.1 -p 530 10.152.51.216.dynamic.bl.netins.net a
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 478
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;10.152.51.216.dynamic.bl.netins.net. IN        A

;; ANSWER SECTION:
10.152.51.216.dynamic.bl.netins.net. 3600 IN A  127.0.0.2

Is this a bug, or am I doing something wrong?

Thanks in advance.

Mark A Jones