Hi All,
I'm using ASSP version 2.1.1(12090) and have some trouble with the DNSBL
b.barracudacentral.org. It looks like ASSP is ignoring answers for
b.barracudacentral.org as it never appears in the log files. I have
successfully registered to Barracudacentral and did register the ISP name
servers IP addresses we are using. My ASSP configuration looks like that:
UseLocalDNS:=1
ValidateRBL:=1
RBLServiceProvider:=file:files/dnsbls.txt with content:
zen.spamhaus.org=>25
ix.dnsbl.manitu.net=>25
b.barracudacentral.org=>25
cbl.abuseat.org=>25
bl.spamcop.net=>25
psbl.surriel.com=>25
dnsbl-1.uceprotect.net=>25
RBLmaxreplies:=7
RBLmaxhits:=7 (just for testing, usually set to 2)
RBLmaxweight:=50
RBLmaxtime:=15
RBLsocktime:=1
RBLCacheExp:=24
Showmaxreplies:=1 (to see all replies in the log file and not until maxreplies)
DNS Flow is like that: ASSP queries -> local LAN name server which queries ->
ISP name server which answers to -> local LAN name server which answer to ->
ASSP
I can see in the local LAN name servers log file that this DNS flow is also
true for b.barracudacentral.org and that we receive answers.
I count the DNSBL hits in the log files like that (no hits for
b.baracudacentral.org):
grep DNSBL: *.txt | grep zen.spamhaus.org | wc
589 14692 152965
grep DNSBL: *.txt | grep ix.dnsbl.manitu.net | wc
518 13185 138115
grep DNSBL: *.txt | grep b.barracudacentral.org | wc
0 0 0
grep DNSBL: *.txt | grep cbl.abuseat.org | wc
358 9237 95493
grep DNSBL: *.txt | grep bl.spamcop.net | wc
85 2159 23358
grep DNSBL: *.txt | grep psbl.surriel.com | wc
57 1555 16449
grep DNSBL: *.txt | grep dnsbl-1.uceprotect.net | wc
220 5566 60027
On the command line I did some DNS queries (127.0.0.2; 186.157.200.64 which is
not listed; 41.96.7.178 which is listed):
host 2.0.0.127.b.barracudacentral.org
2.0.0.127.b.barracudacentral.org has address 127.0.0.2
host 64.200.157.186.b.barracudacentral.org
Host 64.200.157.186.b.barracudacentral.org not found: 3(NXDOMAIN)
host 178.7.96.41.b.barracudacentral.org
178.7.96.41.b.barracudacentral.org has address 127.0.0.2
Anyone has an idea?
Thank you,
Marcus
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user
