Spam List - DNS querys

[Moacyr Leite da Silva]

Hi there,

I was make some tunning on server and saw that have a huge of dns querys for spam blacklists like sorbs spamhaus rfc-ignorant blitzed spamcop.net
But I have enable spam blacklists only for ORDB-RBL and SBL+XBL

Why these dns querys are being issued?!

Thanks
Moacyr Leite da Silva
www.akadnyx.com.br


RH 9.0
MailScanner-4.29.7-1
clamavmodule
SpamAssassin 2.63


MailScanner.conf
# This is the list of spam blacklists (RBLs) which you are using.
# See the "Spam List Definitions" file for more information about what
# you can put here.
# This can also be the filename of a ruleset.
Spam List = ORDB-RBL SBL+XBL # MAPS-RBL+ costs money (except .ac.uk)

spam.lists.conf is default from ./install.sh

#tethereal -i any port 53
114.218643 200.207.50.175 -> 200.204.0.10 DNS Standard query A 179.3.176.200.dnsbl.sorbs.net
114.268473 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT 179.3.176.200.sbl.spamhaus.org
114.268548 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT 139.55.154.200.sbl.spamhaus.org
114.268613 200.207.50.175 -> 200.204.0.10 DNS Standard query A terra.com.br.dsn.rfc-ignorant.org
114.268678 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT 179.3.176.200.ipwhois.rfc-ignorant.org
114.295279 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT 139.55.154.200.ipwhois.rfc-ignorant.org
114.295354 200.207.50.175 -> 200.204.0.10 DNS Standard query A 179.3.176.200.opm.blitzed.org
114.295418 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT 179.3.176.200.list.dsbl.org
114.295481 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT 139.55.154.200.list.dsbl.org
114.295544 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT 226.55.154.200.bl.spamcop.net
114.627050 200.204.0.10 -> 200.207.50.175 DNS Standard query response, No such name
114.628281    127.0.0.1 -> 127.0.0.1    DNS Standard query response, No such name
114.743826 200.204.0.10 -> 200.207.50.175 DNS Standard query response, No such name
114.744691    127.0.0.1 -> 127.0.0.1    DNS Standard query response, No such name
115.359766 200.204.0.10 -> 200.207.50.175 DNS Standard query response, No such name
115.361002    127.0.0.1 -> 127.0.0.1    DNS Standard query response, No such name
116.092019 200.204.0.138 -> 200.207.50.175 DNS Standard query response, No such name
116.093466    127.0.0.1 -> 127.0.0.1    DNS Standard query response, No such name
116.278545 200.207.50.175 -> 63.251.174.107 DNS Standard query TXT 139.55.154.200.sbl.spamhaus.org
116.278662 200.207.50.175 -> 128.194.254.4 DNS Standard query A terra.com.br.dsn.rfc-ignorant.org
116.278747 200.207.50.175 -> 128.194.254.4 DNS Standard query TXT 179.3.176.200.ipwhois.rfc-ignorant.org
116.308330 200.207.50.175 -> 128.194.254.4 DNS Standard query TXT 139.55.154.200.ipwhois.rfc-ignorant.org
116.308435 200.207.50.175 -> 66.98.161.17 DNS Standard query TXT 179.3.176.200.list.dsbl.org
116.308513 200.207.50.175 -> 66.98.161.17 DNS Standard query TXT 139.55.154.200.list.dsbl.org

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
For further info about MailScanner, please see the Most Asked
Questions at    http://www.mailscanner.biz/maq/     and the archives
at    http://www.jiscmail.ac.uk/lists/mailscanner.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20040427/66465ddf/attachment.html