Spam List - DNS querys

[Ugo Bellavance]

Moacyr Leite da Silva wrote:
> Hi there,
>
> I was make some tunning on server and saw that have a huge of dns querys
> for spam blacklists like sorbs spamhaus rfc-ignorant blitzed spamcop.net
> But I have enable spam blacklists only for ORDB-RBL and SBL+XBL
>
> Why these dns querys are being issued?!

Probably in SpamAssassin.

>
> Thanks
> Moacyr Leite da Silva
> www.akadnyx.com.br <http://www.akadnyx.com.br>
>
>
> RH 9.0
> MailScanner-4.29.7-1
> clamavmodule
> SpamAssassin 2.63
>
>
> MailScanner.conf
> # This is the list of spam blacklists (RBLs) which you are using.
> # See the "Spam List Definitions" file for more information about what
> # you can put here.
> # This can also be the filename of a ruleset.
> Spam List = ORDB-RBL SBL+XBL # MAPS-RBL+ costs money (except .ac.uk)
>
> spam.lists.conf is default from ./install.sh
>
> #tethereal -i any port 53
> 114.218643 200.207.50.175 -> 200.204.0.10 DNS Standard query A
> 179.3.176.200.dnsbl.sorbs.net
> 114.268473 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
> 179.3.176.200.sbl.spamhaus.org
> 114.268548 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
> 139.55.154.200.sbl.spamhaus.org
> 114.268613 200.207.50.175 -> 200.204.0.10 DNS Standard query A
> terra.com.br.dsn.rfc-ignorant.org
> 114.268678 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
> 179.3.176.200.ipwhois.rfc-ignorant.org
> 114.295279 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
> 139.55.154.200.ipwhois.rfc-ignorant.org
> 114.295354 200.207.50.175 -> 200.204.0.10 DNS Standard query A
> 179.3.176.200.opm.blitzed.org
> 114.295418 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
> 179.3.176.200.list.dsbl.org
> 114.295481 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
> 139.55.154.200.list.dsbl.org
> 114.295544 200.207.50.175 -> 200.204.0.10 DNS Standard query TXT
> 226.55.154.200.bl.spamcop.net
> 114.627050 200.204.0.10 -> 200.207.50.175 DNS Standard query response,
> No such name
> 114.628281    127.0.0.1 -> 127.0.0.1    DNS Standard query response, No
> such name
> 114.743826 200.204.0.10 -> 200.207.50.175 DNS Standard query response,
> No such name
> 114.744691    127.0.0.1 -> 127.0.0.1    DNS Standard query response, No
> such name
> 115.359766 200.204.0.10 -> 200.207.50.175 DNS Standard query response,
> No such name
> 115.361002    127.0.0.1 -> 127.0.0.1    DNS Standard query response, No
> such name
> 116.092019 200.204.0.138 -> 200.207.50.175 DNS Standard query response,
> No such name
> 116.093466    127.0.0.1 -> 127.0.0.1    DNS Standard query response, No
> such name
> 116.278545 200.207.50.175 -> 63.251.174.107 DNS Standard query TXT
> 139.55.154.200.sbl.spamhaus.org
> 116.278662 200.207.50.175 -> 128.194.254.4 DNS Standard query A
> terra.com.br.dsn.rfc-ignorant.org
> 116.278747 200.207.50.175 -> 128.194.254.4 DNS Standard query TXT
> 179.3.176.200.ipwhois.rfc-ignorant.org
> 116.308330 200.207.50.175 -> 128.194.254.4 DNS Standard query TXT
> 139.55.154.200.ipwhois.rfc-ignorant.org
> 116.308435 200.207.50.175 -> 66.98.161.17 DNS Standard query TXT
> 179.3.176.200.list.dsbl.org
> 116.308513 200.207.50.175 -> 66.98.161.17 DNS Standard query TXT
> 139.55.154.200.list.dsbl.org
> -------------------------- MailScanner list ---------------------- To
> leave, send leave mailscanner to jiscmail at jiscmail.ac.uk For further
> info about MailScanner, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/ and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
For further info about MailScanner, please see the Most Asked
Questions at    http://www.mailscanner.biz/maq/     and the archives
at    http://www.jiscmail.ac.uk/lists/mailscanner.html