[rbldnsd] IPs not getting filtered ??
Sebastiaan Tigchelaar
sebastiaan.tigchelaar at src.nl
Mon Sep 26 19:39:33 MSD 2005
Hi,
I noticed today that a number of spams originated from IPs withing ranges
that are blocked.
The 2 beneath is what I have open atm.
These (and other) spams arrived after a restart of RBLDNSD and even a reboot
of the machine.
Could this be a bug?
222.183.73.197 CHINA 222.176-183
>From the China datafile:
:127.0.0.2:Uh oh, an RBL said that $ is from an unwanted user/ISP/area.
<..>
222.160-163
222.176-183 <==
222.208-223
222.32-63
222.76-79
222.92-95
220.91.203.142 KOREA 220.88-95
>From the Korea datafile:
:127.0.0.2:Uh oh, an RBL said that $ is from an unwanted user/ISP/area.
<...>
220.64-95
220.72-87
220.88-95 <==
220.103
220.116-127
220.149
221.138-143
221.144-168
222.232-239
I also tried to enable logging, but no luck so far yet.
Using /etc/sysconf/rbldnsd
RBLDNSD="dsbl -r/var/lib/rbldns/ -b 10.2.1.101/530 \
ips.blocked.rbl:ip4set:metadata,clients,arcor,auna-es,bellsouth,blueyonder,bt-uk,charter,club-internet,comcast,gaoland,hansenet,interbusiness,ntlworld,proxad,roadrunner,shawcomm,t-dialin,telefonica,telepac-portugal,tpnet-polen,ttnet-turkije,verizon,wanadoo-es-fr,zuid-amerika,land-china,land-japan,land-taiwan,land-korea,hatemails,unknowns,pre-process
\
hosts.blocked.rbl:dnset:hosts \
-l +/var/lib/rbldns/log/rbl-log \
-s /var/lib/rbldns/stats/rbl-stats \
"
Sebastiaan
More information about the rbldnsd
mailing list