RBL's

[John Schmerold]

Good question. Postfix stops after first hit:
[root at mx1 ~]# grep -ric "blocked using zen.spamhaus.org" /var/log/maillog.1
207
[root at mx1 ~]# grep -ric "blocked using cbl.abuseat.org" /var/log/maillog.1
3251
[root at mx1 ~]#

[root at mx1 ~]# grep -ri 213.160.182.228 /var/log/maillog
Mar 12 07:38:33 mx1 postfix/smtpd[28494]: connect from 
static-dsl-228.213-160-182.telecom.sk[213.160.182.228]
Mar 12 07:38:34 mx1 postfix/smtpd[28494]: NOQUEUE: reject_warning: EHLO 
from static-dsl-228.213-160-182.telecom.sk[213.160.182.228]: 450 <Speed
Touch.lan>: Helo command rejected: Host not found; proto=SMTP 
helo=<SpeedTouch.lan>
Mar 12 07:38:34 mx1 postfix/smtpd[28494]: NOQUEUE: reject: RCPT from 
static-dsl-228.213-160-182.telecom.sk[213.160.182.228]: 554 Service unavai
lable; Client host [213.160.182.228] blocked using cbl.abuseat.org; 
Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=213.160.182.228; from=<j
rseitaukrb at arcanist.net> to=<deanna at sample.com> proto=ESMTP 
helo=<SpeedTouch.lan>
Mar 12 07:38:34 mx1 postfix/smtpd[28494]: disconnect from 
static-dsl-228.213-160-182.telecom.sk[213.160.182.228]
[root at mx1 ~]#


Scott Silva wrote:
> John Schmerold spake the following on 3/12/2007 2:56 AM:
>> We do cbl.abuseat.org before Zen to keep from exceeding Zen's daily
>> lookup policy. We're pretty close to 100 users and do not want to get
>> into high volume category.
>>
>> Thanks for heads up regarding ws.surbl.org, good example of a little
>> knowledge being a bad thing.
>>
> But won't that just double the lookups? Or do the lookups end on the first hit?
> 
> 
>