Mailscanner RBL checks

Richard Frovarp Richard.Frovarp at sendit.nodak.edu
Tue Aug 14 17:32:56 IST 2007


Where did you look? Have you found the two files I referenced?

Vlad Mazek wrote:
> First thing I did :) There doesn't seem to be anything, not even 
> check_uridnsbl or anything even with the rbl pattern search.
>
> I am at a loss as to what is launching these queries but its sure 
> trashing this one site for some reason.
>
> -Vlad
>
> On 8/14/07, *Richard Frovarp* <Richard.Frovarp at sendit.nodak.edu 
> <mailto:Richard.Frovarp at sendit.nodak.edu>> wrote:
>
>     grep through the rules. URIBLs seem to be in 25_uribl.cf and
>     DNSBLs seem
>     to be in 20_dnsbl_tests.cf
>
>     Vlad Mazek wrote:
>     > Thing is, skip_rbl_checks =1 would skip them all, I just want to
>     > restrict which ones are being queried.
>     >
>     > Here are the queries that are launched by MailScanner:
>     > [2351] dbg: dns: URIBL_RED lookup start
>     > [2351] dbg: dns: URIBL_GREY lookup start
>     > [2351] dbg: dns: WHOIS_SECUREWHOIS lookup start
>     > [2351] dbg: dns: WHOIS_MYPRIVREG lookup start
>     > [2351] dbg: dns: WHOIS_NETSOLPR lookup start
>     > [2351] dbg: dns: WHOIS_AITPRIV lookup start
>     > [2351] dbg: dns: URIBL_SC_SURBL lookup start
>     > [2351] dbg: dns: URIBL_AB_SURBL lookup start
>     > [2351] dbg: dns: WHOIS_CONTACTPRIV lookup start
>     > [2351] dbg: dns: WHOIS_NAMEKING lookup start
>     > [2351] dbg: dns: WHOIS_PRIVPROT lookup start
>     > [2351] dbg: dns: WHOIS_WHOISGUARD lookup start
>     > [2351] dbg: dns: URIBL_PH_SURBL lookup start
>     > [2351] dbg: dns: URIBL_BLACK lookup start
>     > [2351] dbg: dns: WHOIS_PRIVACYPOST lookup start
>     > [2351] dbg: dns: URIBL_RHS_DOB lookup start
>     > [2351] dbg: dns: URIBL_JP_SURBL lookup start
>     > [2351] dbg: dns: URIBL_WS_SURBL lookup start
>     > [2351] dbg: dns: URIBL_OB_SURBL lookup start
>     > [2351] dbg: dns: WHOIS_DMNBYPROXY lookup start
>     > [2351] dbg: dns: WHOIS_REGISTERFLY lookup start
>     > [2351] dbg: dns: WHOIS_UNLISTED lookup start
>     > [2351] dbg: dns: WHOIS_MONIKER_PRIV lookup start
>     > [2351] dbg: dns: URIBL_SBL lookup start
>     >
>     > How do I find out which rule/definition is causing all these
>     lookups
>     > to launch?
>     >
>     > -Vlad
>     >
>



More information about the MailScanner mailing list