Manually test RBL?

[Julian Field]

At 16:15 25/01/2004, you wrote:
> > >I've got two severs set with MailScanner and using the RBL
> > spamcop.net.
> > >One one server spamcop works great and seems to tag more
> > spam than any
> > >other RBL, but on the other server (in a different
> > network/location),
> > >spamcop is not getting one hit and the logs show that it times out
> > >every time. This is a client's site and this server has a
> > Pix firewall
> > >and ICMP turned off both ways. I don't think this makes a
> > difference though.
> > >
> > >Is there anyway from the command line to test connectivity
> > with spamcop?
> > >
> > >Or does anybody have an idea why this might be happening?
> > >
> > >On the RBL line in SpamScanner,
> >
> > SpamScanner?
>
>Oops, meant MailScanner.
>
> >
> > >  spamcop is listed as 'spamcop.net' on both servers.
> >
> > What about the dot on the end? It should be there, like it is
> > for the other lists. Otherwise check the DNS setup on the
> > rogue machine. The standard test is this:
>
>Here is the exact line on both servers. They both do not have the dot at
>the end, but the one that is working catches about 1000 vi spamcop every
>day. Should I add the dot at the end anyway?

In MailScanner.conf, you should list the RBLs in exactly the way they are
defined in spam.lists.conf. The 2nd field in the lines in spam.lists.conf
should have the "." on the end.

>And should I use
>bl.spamcop.net. instead of just spamcop.net that I'm using now?

Use the list name defined in spam.lists.conf.

>Spam List = ORDB-RBL spamhaus.org spamcop.net list.dsbl.org
>cbl.abuseat.org opm.blitzed.org

You can optimise this by defining
SBL+XBL                         sbl-xbl.spamhaus.org.
in spam.lists.conf and then use "SBL+XBL" in MailScanner.conf instead of
spamhaus.org and cbl.abuseat.org. One less DNS lookup per message, worth doing.

>Concerning the good server, I get basically the same results that you
>had listed. However, with the server that is having problems I get the
>following for the spamcop test:
>
>[root at pavescan MailScanner]# dig 2.0.0.127.bl.spamcop.net. any
>
>; <<>> DiG 9.2.1 <<>> 2.0.0.127.bl.spamcop.net. any
>;; global options:  printcmd
>;; Got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15561
>;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
>
>;; QUESTION SECTION:
>;2.0.0.127.bl.spamcop.net.      IN      ANY
>
>;; AUTHORITY SECTION:
>bl.spamcop.net.         86400   IN      SOA     loopback. root.loopback.
>1 3600 600 3600000 86400
>
>;; Query time: 23 msec
>;; SERVER: 10.254.71.10#53(10.254.71.10)
>;; WHEN: Sun Jan 25 10:13:06 2004
>;; MSG SIZE  rcvd: 105
>
>
>Any suggestions? Do you know why it is listing loopback.

Check the /etc/resolv.conf between the 2 machines. Obviously the 2 machines
should produce the same result for the same query.
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654