Any new techniques?

[Tracy Greggs]

I've been running rbldnsd and bind on the same server for years.

I created a fake zone, ie clients.blocked.rbl and have rbldnsd listening 
on port 530 instead of 53

I create a forward zone in bind for clients.blocked.rbl

zone  "clients.blocked.rbl" IN {
         type forward;
         forward first;
         forwarders { 127.0.0.1 port 530; };
};

And rbldnsd.wrapper

  RBLDNSD='- -r /var/lib/rbldns -l rbldnsd.log -b 127.0.0.1/530 
clients.blocked.rbl:dnset:nrd,iats,udrp'

I have,  dnssec-validation no;

I'm running on Ubuntu 20.04 LTS but this should be the same on any 
distro really.

Good luck.



------ Original Message ------
>From "Peter" <email at ace.net.au>
To mailscanner at lists.mailscanner.info
Date 2/9/2024 12:28:47 AM
Subject Re: Any new techniques?

>Hi, Can anyone provide some notes on adding rbldnsd zones to unbound?
>
>I have been having trouble running bind and rbldnsd on the same server, so
>thought I would try unbound.   The notes I have so far found for both
>rbldnsd and unbound are scarce and I haven't found anything useful about
>the two together.
>
>My rbldnsd is working well on a separate server to bind, but I would like
>to delete a server.   I think it's updated security on recent bind versions
>that is the problem,
>
>Any help or pointers appreciated.
>
>
>*********** REPLY SEPARATOR  ***********
>
>On 16/02/2015 at 1:56 PM C. Jon Larsen wrote:
>
>>>  Also, Is there a way to create your own on-server URIBL, that way as
>>>  soon as an email comes in with a URL that was not detected by the
>>>  official URIBL, I could create a small program to add it locally?
>>
>>yes, you can install the rbldnsd package and serve your own uri dbls right
>
>>out of it via a simple text file. Setup SA rules to query it, and you are
>>set. We use unbound dns caches to lessen the dns query load so another
>>step for us is to point the caches at the rbl instance via unbound dns
>>static routes.
>>
>>
>>>  Thanks,
>>>  Max
>>>  --
>>>  MailScanner mailing list
>>>mailscanner at lists.mailscanner.info
>>>http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>>  Before posting, read http://wiki.mailscanner.info/posting
>>>
>>>  Support MailScanner development - buy the book off the website!
>>>
>>>
>>--
>>MailScanner mailing list
>>mailscanner at lists.mailscanner.info
>>http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>Before posting, read http://wiki.mailscanner.info/posting
>>
>>Support MailScanner development - buy the book off the website!
>
>
>
>
>
>--
>MailScanner mailing list
>mailscanner at lists.mailscanner.info
>http://lists.mailscanner.info/mailman/listinfo/mailscanner
>