Am 20.04.2016 um 14:30 schrieb Michelle Sullivan:
$ /opt/local/bin/whois 174.36.198.233
[... ARIN record elided ...]
Found a referral to rwhois.softlayer.com:4321.
%rwhois V-1.5:003fff:00 rwhois.attcloudarchitect.com (by Network
Solutions, Inc. V-1.5.9.6)
network:Class-Name:network
Bill Cole wrote:
On 28 Jan 2016, at 8:54, Michelle Sullivan wrote:
[...]
Only the first is currently found in a the collection of authoritative
nameservers for dnsbl.sorbs.net, but all of them have symmetric PTR/A
records, implying that they aren't some sort of poisoning artifact.
Also, the
On 28 Jan 2016, at 8:54, Michelle Sullivan wrote:
[...]
Only the first is currently found in a the collection of
authoritative
nameservers for dnsbl.sorbs.net, but all of them have symmetric PTR/A
records, implying that they aren't some sort of poisoning artifact.
Also, the last 3 are in
Very old thread I know, but have been busy elsewhere...
Bill Cole wrote:
>
> The SOA and 13 in-zone NS records for dnsbl.sorbs.net both have 1-day
> TTL's, while the A records for the rbldns$x.sorbs.net names to which
> the NS records point have 10-minute TTL's and the IPs those names
> resolves
On 13 May 2015, at 20:24, Chris wrote:
So I guess then that the bottom line is that eventually the queries are
getting through to SORBS but I'll still be seeing some errors and just
don't worry about it. Does that sound about right?
Yes.
On Wed, 2015-05-13 at 02:05 +, Jeremy McSpadden wrote:
dig +trace and see if your ISP is intercepting queries.
--
Jeremy McSpadden | Flux Labs
Local - 850-250-5590x501 | Mobile - 850-890-2543
Fax - 850-254-2955 | Toll Free - 877-699-FLUX
Web - http://www.fluxlabs.net
Jeremy, I'm
Chris wrote:
Is there a way to turn off queries to SORBS so I don't keep seeing this
in my logs:
error (connection refused) resolving
'23.164.11.209.dnsbl.sorbs.net/A/IN': 67.228.187.34#53
I have Bind9 setup as a caching name server and am using 127.0.0.1 as my
DNS.
Are you seeing
From: Chris cpoll...@embarqmail.com
Sent: Wednesday, May 13, 2015 8:50 AM
To: Jeremy McSpadden
Cc: users@spamassassin.apache.org
Subject: Re: Turning off queries to SORBS
On Wed, 2015-05-13 at 02:05 +, Jeremy McSpadden wrote:
dig +trace and see if your ISP is intercepting queries
On 5/13/2015 10:08 AM, David Jones wrote:
From: Chris cpoll...@embarqmail.com
Sent: Wednesday, May 13, 2015 8:50 AM
To: Jeremy McSpadden
Cc: users@spamassassin.apache.org
Subject: Re: Turning off queries to SORBS
On Wed, 2015-05-13 at 02:05 +, Jeremy McSpadden wrote:
dig +trace and see
From: Reindl Harald h.rei...@thelounge.net
Sent: Wednesday, May 13, 2015 12:35 PM
To: users@spamassassin.apache.org
Subject: Re: Turning off queries to SORBS
Am 13.05.2015 um 19:26 schrieb David Jones:
Connection refused errors are specific UDP responses from upstream DNS
servers that are being
On Wed, 2015-05-13 at 13:49 -0400, Kris Deugau wrote:
Chris wrote:
Not upset about the 'noise', to my untrained eye it looks to me as if
the lookups are failing:
chris@localhost:/var/log$ grep 'connection refused' /var/log/syslog|grep
sorbs|awk '{ print $10; }'|sort|uniq -c
1
On 13 May 2015, at 16:58, Chris wrote:
On Wed, 2015-05-13 at 13:49 -0400, Kris Deugau wrote:
Chris wrote:
Not upset about the 'noise', to my untrained eye it looks to me as
if
the lookups are failing:
chris@localhost:/var/log$ grep 'connection refused'
/var/log/syslog|grep
sorbs|awk '{
On Wed, 2015-05-13 at 20:19 -0400, Bill Cole wrote:
On 13 May 2015, at 16:58, Chris wrote:
On Wed, 2015-05-13 at 13:49 -0400, Kris Deugau wrote:
Chris wrote:
Not upset about the 'noise', to my untrained eye it looks to me as
if
the lookups are failing:
chris@localhost:/var/log$
Chris wrote:
I'll answer several questions in this post hopefully.
First, the line in my resolv.conf fire search PK5001Z, pertains to my
Zyxel PK5001Z modem, so as a test I've commented out that line in
my /etc/resolv.conf and ran sudo resolvconf -u. If it makes a difference
I'll make the
On Wed, 2015-05-13 at 10:12 -0400, Kris Deugau wrote:
Chris wrote:
Is there a way to turn off queries to SORBS so I don't keep seeing this
in my logs:
error (connection refused) resolving
'23.164.11.209.dnsbl.sorbs.net/A/IN': 67.228.187.34#53
I have Bind9 setup as a caching name
On Wed, 2015-05-13 at 14:08 +, David Jones wrote:
From: Chris cpoll...@embarqmail.com
Sent: Wednesday, May 13, 2015 8:50 AM
To: Jeremy McSpadden
Cc: users@spamassassin.apache.org
Subject: Re: Turning off queries to SORBS
On Wed, 2015-05-13 at 02:05 +, Jeremy McSpadden wrote:
dig
On Wed, 2015-05-13 at 18:59 -0400, Kris Deugau wrote:
Chris wrote:
I'll answer several questions in this post hopefully.
First, the line in my resolv.conf fire search PK5001Z, pertains to my
Zyxel PK5001Z modem, so as a test I've commented out that line in
my /etc/resolv.conf and ran
Am 14.05.2015 um 00:59 schrieb Kris Deugau:
As far as running something other than Bind, I'd run it for many years
on my old Mandriva box before it crashed. Once I got it up and running
(with some help from the Bind users list) I never had one single
problem.
*nod* I continue to use it on my
Am 13.05.2015 um 18:53 schrieb Reindl Harald:
Am 13.05.2015 um 18:17 schrieb Chris:
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by
resolvconf(8)
# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 127.0.0.1
nameserver 127.0.0.1
search PK5001Z
From: Reindl Harald h.rei...@thelounge.net
Sent: Wednesday, May 13, 2015 11:53 AM
To: users@spamassassin.apache.org
Subject: Re: Turning off queries to SORBS
Am 13.05.2015 um 18:17 schrieb Chris:
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by
resolvconf(8)
# DO NOT EDIT
Am 13.05.2015 um 18:17 schrieb Chris:
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by
resolvconf(8)
# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 127.0.0.1
nameserver 127.0.0.1
search PK5001Z
as already suggested days ago REMOVE search
Am 13.05.2015 um 19:26 schrieb David Jones:
Connection refused errors are specific UDP responses from upstream DNS
servers that are being denied due to rate limiting, bad query packets, or
something
that simply ticked off that upstream DNS server. I would point to a different
DNS server or
Chris wrote:
Not upset about the 'noise', to my untrained eye it looks to me as if
the lookups are failing:
chris@localhost:/var/log$ grep 'connection refused' /var/log/syslog|grep
sorbs|awk '{ print $10; }'|sort|uniq -c
1 '11.1.4.96.dnsbl.sorbs.net/A/IN':
1
Is there a way to turn off queries to SORBS so I don't keep seeing this
in my logs:
error (connection refused) resolving
'23.164.11.209.dnsbl.sorbs.net/A/IN': 67.228.187.34#53
I have Bind9 setup as a caching name server and am using 127.0.0.1 as my
DNS.
Chris
--
Chris
KeyID 0xE372A7DA98E6705C
dig +trace and see if your ISP is intercepting queries.
--
Jeremy McSpadden | Flux Labs
Local - 850-250-5590x501tel:850-250-5590;501 | Mobile -
850-890-2543tel:850-890-2543
Fax - 850-254-2955tel:850-254-2955 | Toll Free -
877-699-FLUXtel:877-699-FLUX
Web -
25 matches
Mail list logo
