[rbldnsd] rbldnsd setup and domain hoster

[Amos Jeffries]

Before I get on to assisting with the stated problem.

_Why_ are you doing this?
If it's a new list please read this:
http://www.techtheft.info/book/dnsbl/ch1_reasons.php
(http://www.techtheft.info/book/dnsbl/ may have other details you need to 
think about first)

I would like some details for the rbl registry I help maintain:
    basic domain name (that dnsbl.yourdomain.com you keep using)
    URL of the pubic description page(s) detailing:
        - content of the list,
        - methods of getting on/off
        - contact person (if any publicly announced)

The registry does free testing and provides tools for postmasters to keep 
their mailservers from dying when a list goes belly up.
So...
Please dont forget to add the common test lookups to your list:
    127.0.0.1          - for messages about the list dying or closing
    127.0.0.2-255  - for 'list working' test where list contains IP 
addresses (RBL).
    example.com     - for 'list working' test where list contains domain 
names (RHSBL).


Thanks.

Now for your answer:

----- Original Message ----- 
From: "Monk" <Monk at mindforge.org>
To: <rbldnsd at corpit.ru>
Sent: Wednesday, November 22, 2006 8:18 AM
Subject: [rbldnsd] rbldnsd setup and domain hoster


> Hi all,
>
<snip>
> I'm pretty new to domain handling apart from the convenient web interface 
> of our domain hoster, so please bear with my noob questions.
> I managed to get rbldnsd running so that it returns our blacklist results 
> with a dig command  but only when I specify the command with 
> @ip_running_rbldnsd.
> Obviously  rbldnsd is not registered as "public" DNS server and this is 
> where my problem starts.
>
> 1. I would like to continue using the domain hosters webinterface for our 
> regular domain management. The domain hoster supports registering and 
> adding own DNS servers.

You may want to do that, it is not strictly necessary, but helps remove some 
potential problems later.

Provided your server is on a different machine to the hosts DNS server just 
add a DNS record to the yourdomain.com DNS file/zone:

    dnsbl    NS    your.rbldnsd.ip.address.

If you  have rbldnsd on the main DNS server itself things get trickier.
(those bind configs you got so confused over)


> 2. I would like to have rbldnsd to be authoritative for only our blacklist 
> zone

That is the default.


> 3. How do I have to setup rbldnsd's zone file to answer to something like 
> dnsbl.ourdomain.com and use this address for our blacklist lookups?

A correctly setup rbldnsd will only server for the configured domain. An 
incorrectly setup rbldnsd will not server at all. My answer above shows the 
simplest way how to export it into the public DNS. The rbldnsd manual is 
pretty clear on how to use the rbldnsd config file.


>
> I read the manual pages of rbldnsd and some general stuff about DNS but 
> still can't figure out how I have to setup this stuff. I also found some

Then send some time relaxing and read it again. Experiment if you have to.

> how-tos in combination with bind but I'd rather have only rbldnsd. An

The bind how-tos' are all about getting rbldnsd running on proper DNS 
server. Ignore them unless you really have to.

> example how this has to be configured would be really appreciated. Many 
> thanks in advance.

The entire middle section of the manual.

>
> Best regards,
>
> Thilo

PS.
I would like to know what the domain name of you rbl is and any