[rbldnsd] IPs not getting filtered ??

[Amos Jeffries]

Could it be old mailq files that got past the filter before it worked? 
Or is it continuing with new mail?

AYJ

Sebastiaan Tigchelaar wrote:
>>> 222.183.73.197    CHINA    222.176-183
>>>
>>>> From the China datafile:
>>>
>>>
>>> :127.0.0.2:Uh oh, an RBL said that $ is from an unwanted user/ISP/area.
>>> <..>
>>> 222.160-163
>>> 222.176-183  <==
> 
> <..>
> 
>> So, what does
>>
>>  host 197.73.183.222.your.zone.name
>>
>> say?
> 
> 
> Thats the weird thing, DIG gives the expected results.
> I tried it immediately after I found the 'offending' IP ~_^
> 
> [root at w3 root]# dig 197.73.183.222.ips.blocked.rbl
> 
<snip positive dig>
> 
> I will keep an eye out for the other IPs that might happen.
> 
>>> I also tried to enable logging, but no luck so far yet.
>>
>>
>> No luck in what?  You can't enable logging?  Are you sure
>> your mailserver do query your nameserver?
> 
> 
> I tested the RBL first with a block on my own mailserver and that worked.
> I found the -l option with manual.
> -l +/var/lib/rbldns/log/rbl-log
> 
> /var/lib/rbldns/log is the folder
> rbl-log is the file
> I used + to see what logging would show for the IPs that get thru, but 
> the file isn't getting filled.
> 
> Sebastiaan
> _______________________________________________
> rbldnsd mailing list
> rbldnsd at corpit.ru
> http://www.corpit.ru/mailman/listinfo/rbldnsd
> 


Amos Jeffries
amos at treenetnz.com
021 293 4049

Treehouse Networks Ltd
www.treenetnz.com

-- 
We are fast approaching the time when "packets from a M$ operating 
system" is synonymous with "hostile behavior".