J Doe skrev den 2024-05-19 23:57:
On 2024-05-17 23:13, Noel Butler wrote:
On 18/05/2024 08:14, J Doe wrote:
Here is an example entry:
10-May-2024 05:34:39.024 lame-servers: info: REFUSED unexpected
RCODE resolving 'rbldns10.sorbs.net/A/IN': 108.59.172.201#53
SORBS has been ultra sensitive like that for a few years now, it
allows
lookups, then it doesn't, seconds later it does, I suspect an ill
configured DoS protection mechanism that's overly paranoid, but good
luck getting anyone their to listen.
Thank you for your reply ... ok, good to know this is expected
behaviour
for SORBS. Like you said, perhaps it is a DoS response ... maybe when
it gets a lot of look ups in a short period of time from an IP it then
throttles subsequent queries ?
- J
also just that to say rbldnsd is not really a dns server
so if that just provide data on this server, it is not dns confirming to
standards, i lost what part could fails, i just put sorbs in deny on
spamassassin and live with the missing hits
nothing loosed anyway when its refused imho
