[rbldnsd] IPs not getting filtered ??

Sebastiaan Tigchelaar sebastiaan.tigchelaar at src.nl
Mon Sep 26 19:39:33 MSD 2005


Hi,

I noticed today that a number of spams originated from IPs withing ranges 
that are blocked.
The 2 beneath is what I have open atm.
These (and other) spams arrived after a restart of RBLDNSD and even a reboot 
of the machine.

Could this be a bug?


222.183.73.197    CHINA    222.176-183

>From the China datafile:
:127.0.0.2:Uh oh, an RBL said that $ is from an unwanted user/ISP/area.
<..>
222.160-163
222.176-183  <==
222.208-223
222.32-63
222.76-79
222.92-95


220.91.203.142    KOREA    220.88-95

>From the Korea datafile:
:127.0.0.2:Uh oh, an RBL said that $ is from an unwanted user/ISP/area.
<...>
220.64-95
220.72-87
220.88-95  <==
220.103
220.116-127
220.149
221.138-143
221.144-168
222.232-239


I also tried to enable logging, but no luck so far yet.
Using /etc/sysconf/rbldnsd

RBLDNSD="dsbl -r/var/lib/rbldns/ -b 10.2.1.101/530 \
ips.blocked.rbl:ip4set:metadata,clients,arcor,auna-es,bellsouth,blueyonder,bt-uk,charter,club-internet,comcast,gaoland,hansenet,interbusiness,ntlworld,proxad,roadrunner,shawcomm,t-dialin,telefonica,telepac-portugal,tpnet-polen,ttnet-turkije,verizon,wanadoo-es-fr,zuid-amerika,land-china,land-japan,land-taiwan,land-korea,hatemails,unknowns,pre-process 
\
hosts.blocked.rbl:dnset:hosts \
-l +/var/lib/rbldns/log/rbl-log \
-s /var/lib/rbldns/stats/rbl-stats \
"

Sebastiaan 



More information about the rbldnsd mailing list