[rbldnsd] Problems with Exclusions.

Dallas Engelken dallase at uribl.com
Tue Jan 29 20:13:46 MSK 2008


Greetings...

Is it possible to have a seperate exclusions file in a combined zone?   
The man says...

"Note that when aggre-gating several data files into one dataset, an 
exclusion entry in one file becomes exclusion entry in the whole  
dataset  (which  may  be  a  problem  when  aggregating
       dialups, where exclusions are common, with open relays/proxies, 
where exclusions are rare if at all used)."

So, it sounds like I should be able to do this...

   zone.local:combined:large.rbldnsd \
   zone.local:combined:excludes.rbldnsd \

With the goal here of quick false remediation.  Assuming large.rbldnsd 
is very large (~10m records) and takes 30+ seconds to reload, and there 
is a record in there such as

DOMAIN.TLD :2:blacklisted

I'd like to be able to stick in my excludes.rbldnsd

!DOMAIN.TLD

and rbldns would only reload that file, which would be very quick.   
However, this doesnt seem to work.   Nor does it work when I load the 
zone in this fashion.

   zone.local:combined:large.rbldnsd,excludes.rbldnsd \

If I put the !DOMAIN.TLD at the bottom of large.rbldnsd and wait for it 
to reload, i get NXDOMAIN results as expected.

The only way I can get it to work where my entries are in one file and 
exceptions are in another with with a non-"combined" zone type, like so

   zone.local:dnset:large.rbldnsd,excludes.rbldnsd \

Which doesnt help either because a change to excludes.rbldnsd causes a 
reload of both files in that set.

Splitting them out into seperate lines makes the exclusions fail as well.

  zone.local:dnset:large.rbldnsd \
  zone.local:dnset:excludes.rbldnsd \

Am I trying to do the impossible?

-- 
Dallas Engelken
dallase at uribl.com
http://uribl.com



More information about the rbldnsd mailing list