MailScanner and ORDB rbl

[Alex Neuman van der Hans]

Perhaps it's caching the response for a determinate amount of time, set by
the TTL's on the RBL servers?

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Michael H. Martel
Sent: Tuesday, January 04, 2005 11:24 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: MailScanner and ORDB rbl

Hello!

A Mail Server at one of my colleges was listed as an Open Relay.  It was and
it is now fixed.  It was re-submitted and now when I do a lookup I get this
result :

This host is not listed in ORDB as an open mail relay

Main database status for vtcmail1.vtc.vsc.edu (155.42.16.30)

The host vtcmail1.vtc.vsc.edu is not in the main database

Queue status for vtcmail1.vtc.vsc.edu (155.42.16.30)
Last added to the queue by:     155.42.89.158
Last added to the queue at:     2004-12-30 14:15 GMT
This submission has been confirmed
Teststatus: All probes have been dispatched


However, earlier today I've been getting mail tagged by MailScanner as
possible spam because it believes that this server is still an Open Relay.


If I perform the following command, I see that it appears to still be an
Open Relay.

[mhm06090 at sage .procmail]$ nslookup 30.16.42.155.relays.ordb.org
Note:  nslookup is deprecated and may be removed from future releases.
Consider using the `dig' or `host' programs instead.  Run nslookup with the
`-sil[ent]' option to prevent this message from appearing.
Server:         155.42.1.7
Address:        155.42.1.7#53

Non-authoritative answer:
Name:   30.16.42.155.relays.ordb.org
Address: 127.0.0.2


Trying a machine that I know isn't in the list, returns the expected
results.

[mhm06090 at sage .procmail]$ nslookup 49.1.42.155.relays.ordb.org
Note:  nslookup is deprecated and may be removed from future releases.
Consider using the `dig' or `host' programs instead.  Run nslookup with the
`-sil[ent]' option to prevent this message from appearing.
Server:         155.42.1.7
Address:        155.42.1.7#53

** server can't find 49.1.42.155.relays.ordb.org: NXDOMAIN


I restarted my named process on my DNS server (155.42.1.7), and now it
returns correctly.  What have I configured wrong on my DNS server that it's
doing this?

[mhm06090 at sage .procmail]$ nslookup 30.16.42.155.relays.ordb.org
Note:  nslookup is deprecated and may be removed from future releases.
Consider using the `dig' or `host' programs instead.  Run nslookup with the
`-sil[ent]' option to prevent this message from appearing.
Server:         155.42.1.7
Address:        155.42.1.7#53

** server can't find 30.16.42.155.relays.ordb.org: NXDOMAIN


Thanks!



Michael

--

  --------------------------------o---------------------------------
   Michael H. Martel              | Systems Administrator
   martelm at quark.vsc.edu          | Vermont State Colleges
   http://probe.vsc.edu/~michael  | PH:802-241-2544 FX:802-241-3363

------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the
archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!