> The above two are related, you are using an external DNS resolver

Not really. The DNSBL's I was talking about don't give any answer 
whatsoever.

A list of 94 DNSBL was offered, but only 46 passed the test.



The script I wrote will test 2.0.0.127.<dnsbl> and if it returns a 
127.0.0.0/24 address, it will test and see if 1.0.0.127.<dnsbl> will fail. 
Only then will it use that DNSBL / DNS-combination. It will try local-DNS as 
a secondary option.

I'm not sure what I should do with DNSBL's that return a 127.0.0.0/8 address 
out of the 127.0.0.0/24 scope.

Only 1 DNSBL did this.



The script works in combination with IPaudit that has a top 20 of 
mailclients. It will take all the IP's from the last list and test all of 
the DNSBL's every hour. If someone makes it on a blacklist, we will be 
informed through Zabbix.



Please try the script.

Any comments, suggestions are welcome.



I will take a look at unbound, but bind is what we're using at work and they 
are quite conservative.

We're using powerdns for some domains and reverse DNS, but I soon bumped 
into things that was not supported (dynamic dns with dnsupdate).





JP
------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to