Spam List - DNS querys

Tue Apr 27 13:53:28 IST 2004

If you have Spam assassin installed you will find that it is making the
queries.

Mr Michele Neylon

Blacknight Internet Solutions Ltd

http://www.blacknight.ie/

Tel. +353 59 9137101

  _____

From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Moacyr Leite da Silva
Sent: 27 April 2004 13:45
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: [MAILSCANNER] Spam List - DNS querys

Hi there,

I was make some tunning on server and saw that have a huge of dns querys for
spam blacklists like sorbs spamhaus rfc-ignorant blitzed spamcop.net

But I have enable spam blacklists only for ORDB-RBL and SBL+XBL

Why these dns querys are being issued?!

Thanks

Moacyr Leite da Silva

www.akadnyx.com.br

RH 9.0

MailScanner-4.29.7-1

clamavmodule

SpamAssassin 2.63

MailScanner.conf

# This is the list of spam blacklists (RBLs) which you are using.
# See the "Spam List Definitions" file for more information about what
# you can put here.
# This can also be the filename of a ruleset.
Spam List = ORDB-RBL SBL+XBL # MAPS-RBL+ costs money (except .ac.uk)

spam.lists.conf is default from ./install.sh

#tethereal -i any port 53
114.218643 200.207.50.175 -> 200.204.0.10 DNS Standard query A
179.3.176.200.dnsbl.sorbs.net
114.268473 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
179.3.176.200.sbl.spamhaus.org
114.268548 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
139.55.154.200.sbl.spamhaus.org
114.268613 200.207.50.175 -> 200.204.0.10 DNS Standard query A
terra.com.br.dsn.rfc-ignorant.org
114.268678 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
179.3.176.200.ipwhois.rfc-ignorant.org
114.295279 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
139.55.154.200.ipwhois.rfc-ignorant.org
114.295354 200.207.50.175 -> 200.204.0.10 DNS Standard query A
179.3.176.200.opm.blitzed.org
114.295418 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
179.3.176.200.list.dsbl.org
114.295481 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
139.55.154.200.list.dsbl.org
114.295544 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
226.55.154.200.bl.spamcop.net
114.627050 200.204.0.10 -> 200.207.50.175 DNS Standard query response, No
such name
114.628281    127.0.0.1 -> 127.0.0.1    DNS Standard query response, No such
name
114.743826 200.204.0.10 -> 200.207.50.175 DNS Standard query response, No
such name
114.744691    127.0.0.1 -> 127.0.0.1    DNS Standard query response, No such
name
115.359766 200.204.0.10 -> 200.207.50.175 DNS Standard query response, No
such name
115.361002    127.0.0.1 -> 127.0.0.1    DNS Standard query response, No such
name
116.092019 200.204.0.138 -> 200.207.50.175 DNS Standard query response, No
such name
116.093466    127.0.0.1 -> 127.0.0.1    DNS Standard query response, No such
name
116.278545 200.207.50.175 -> 63.251.174.107 DNS Standard query TXT
139.55.154.200.sbl.spamhaus.org
116.278662 200.207.50.175 -> 128.194.254.4 DNS Standard query A
terra.com.br.dsn.rfc-ignorant.org
116.278747 200.207.50.175 -> 128.194.254.4 DNS Standard query TXT
179.3.176.200.ipwhois.rfc-ignorant.org
116.308330 200.207.50.175 -> 128.194.254.4 DNS Standard query TXT
139.55.154.200.ipwhois.rfc-ignorant.org
116.308435 200.207.50.175 -> 66.98.161.17 DNS Standard query TXT
179.3.176.200.list.dsbl.org
116.308513 200.207.50.175 -> 66.98.161.17 DNS Standard query TXT
139.55.154.200.list.dsbl.org

-------------------------- MailScanner list ---------------------- To leave,
send leave mailscanner to jiscmail at jiscmail.ac.uk For further info about
MailScanner, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/ and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
For further info about MailScanner, please see the Most Asked
Questions at    http://www.mailscanner.biz/maq/     and the archives
at    http://www.jiscmail.ac.uk/lists/mailscanner.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20040427/fa58eb7a/attachment.html