You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Jari Fredriksson <ja...@iki.fi> on 2012/03/21 13:24:20 UTC
OT how to bypass public nameservers as bind forwarders?
I get this in SpamAssassin report:
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL
was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
I use public DNS services as forwarders in my LAN dns (bind9). I
remember that once disabled forwarders for some URIBL but the setting is
gone, and I can't find a recipe.
Howto?
--
Try to get all of your posthumous medals in advance.
Re: OT how to bypass public nameservers as bind forwarders?
Posted by Jari Fredriksson <ja...@iki.fi>.
21.3.2012 16:45, Per Jessen kirjoitti:
> Jari Fredriksson wrote:
>
>>
>> I get this in SpamAssassin report:
>>
>> 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
>> DNSWL
>> was blocked. See
>>
>> http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
>> for more information.
>>
>> I use public DNS services as forwarders in my LAN dns (bind9). I
>> remember that once disabled forwarders for some URIBL but the setting
>> is gone, and I can't find a recipe.
>
> Hi Jari
>
> you set up a zone file for the rbl in question:
>
> zone "rbl" {
> forward first;
> forwarders;
> }
>
That forwarders needs empty {}
Thanks all, I have now:
zone "combined.njabl.org" { type forward; forward first; forwarders {}; };
zone "dnsbl.sorbs.net" { type forward; forward first; forwarders {}; };
zone "zen.spamhaus.org" { type forward; forward first; forwarders {}; };
zone "activationcode.r.mail-abuse.com" { type forward; forward first;
forwarders {}; };
zone "nonconfirm.mail-abuse.com" { type forward; forward first;
forwarders {}; };
zone "iadb.isipp.com" { type forward; forward first; forwarders {}; };
zone "bl.mailspike.net" { type forward; forward first; forwarders {}; };
zone "wl.mailspike.net" { type forward; forward first; forwarders {}; };
zone "bb.barracudacentral.org" { type forward; forward first; forwarders
{}; };
zone "psbl.surriel.com" { type forward; forward first; forwarders {}; };
zone "bl.score.senderscore.com" { type forward; forward first;
forwarders {}; };
zone "list.dnswl.org" { type forward; forward first; forwarders {}; };
zone "multi.uribl.com" { type forward; forward first; forwarders {}; };
Hope it works.
--
Knucklehead: "Knock, knock"
Pee Wee: "Who's there?"
Knucklehead: "Little ol' lady."
Pee Wee: "Liddle ol' lady who?"
Knucklehead: "I didn't know you could yodel"
Re: OT how to bypass public nameservers as bind forwarders?
Posted by Per Jessen <pe...@computer.org>.
Jari Fredriksson wrote:
>
> I get this in SpamAssassin report:
>
> 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
> DNSWL
> was blocked. See
>
> http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
> for more information.
>
> I use public DNS services as forwarders in my LAN dns (bind9). I
> remember that once disabled forwarders for some URIBL but the setting
> is gone, and I can't find a recipe.
Hi Jari
you set up a zone file for the rbl in question:
zone "rbl" {
forward first;
forwarders;
}
--
Per Jessen, Zürich (14.5°C)
Re: OT how to bypass public nameservers as bind forwarders?
Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
On 3/21/2012 8:24 AM, Jari Fredriksson wrote:
> I get this in SpamAssassin report:
>
> 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL
> was blocked. See
>
> http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
> for more information.
>
> I use public DNS services as forwarders in my LAN dns (bind9). I
> remember that once disabled forwarders for some URIBL but the setting is
> gone, and I can't find a recipe.
>
> Howto?
>
First, I'm glad you noticed this. We worked hard to implement this
procedure to notify admins and not cause purposeful FPs.
Second, you should just use your own root hints and not a forwarder if
you already have bind9.
Third, I think you are looking for something like:
zone "X.dnswl.com" IN { type forward; forward first; forwarders { IP
Address of a Server; }; };
That will forward on a per zone basis to a different forwarder.
You might also be able to do something like type hint; file
"root.servers"; instead.
Overall though the second is the "right" answer.
Regards,
KAM
Re: OT how to bypass public nameservers as bind forwarders?
Posted by da...@chaosreigns.com.
On 03/21, Jari Fredriksson wrote:
> 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL
> was blocked. See
>
> http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
> for more information.
This is plenty on topic.
I tried to update the contents of that wiki link with the useful answers
from this thread.
Everybody should feel free to further improve the wiki, just create an
account, and email dev@spamassassin.apache.org to request write access.
--
"He who dies with the most toys... still dies." - No Fear
http://www.ChaosReigns.com
Re: OT how to bypass public nameservers as bind forwarders?
Posted by Robert Schetterer <ro...@schetterer.org>.
Am 21.03.2012 13:39, schrieb Matus UHLAR - fantomas:
> On 21.03.12 14:24, Jari Fredriksson wrote:
>> I get this in SpamAssassin report:
>>
>> 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL
>> was blocked. See
>>
>> http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
>> for more information.
>>
>> I use public DNS services as forwarders in my LAN dns (bind9). I
>> remember that once disabled forwarders for some URIBL but the setting is
>> gone, and I can't find a recipe.
>>
>> Howto?
>
> the "public DNS services" you use as forwarders are blacklisted on
> dnswl, apparently because of high traffic. Are they google DNS servers,
> or your isp's?
>
> Use your own DNS server. If you have BIND9, there's usually no need for
> using other servers as forwarders.
>
http://www.bind9.net/manual/bind/9.3.2/Bv9ARM.ch06.html
forward
A "forward zone" is a way to configure forwarding on a per-domain basis.
A zone statement of type forward can contain a forward and/or forwarders
statement, which will apply to queries within the domain given by the
zone name. If no forwarders statement is present or an empty list for
forwarders is given, then no forwarding will be done for the domain,
canceling the effects of any forwarders in the options statement. Thus
if you want to use this type of zone to change the behavior of the
global forward option (that is, "forward first to", then "forward only",
or vice versa, but want to use the same servers as set globally) you
need to re-specify the global forwarders.
so perhaps delete
somthing like
forward first;
in your config
and/or as said cancel forwarders section total
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
Re: OT how to bypass public nameservers as bind forwarders?
Posted by Matus UHLAR - fantomas <uh...@fantomas.sk>.
On 21.03.12 14:24, Jari Fredriksson wrote:
>I get this in SpamAssassin report:
>
>0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL
> was blocked. See
>
>http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
> for more information.
>
>I use public DNS services as forwarders in my LAN dns (bind9). I
>remember that once disabled forwarders for some URIBL but the setting is
>gone, and I can't find a recipe.
>
>Howto?
the "public DNS services" you use as forwarders are blacklisted on
dnswl, apparently because of high traffic. Are they google DNS servers,
or your isp's?
Use your own DNS server. If you have BIND9, there's usually no need
for using other servers as forwarders.
--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
How does cat play with mouse? cat /dev/mouse
Re: OT how to bypass public nameservers as bind forwarders?
Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
On 3/21/2012 9:07 AM, Jari Fredriksson wrote:
> I used public forwarderds because app called "namebench" told me that
> they are faster. I need bind for my own LAN, but the rest is server as
> is fastest. One is google, other another public one, not google. zone
> solutions is how I have it now. Let us see how it goes...
A good reason to use public forwarders but one which I would say can
cause a variety of issues including problems with DNSRBLs with SA. I
would not recommend that you use a public forwarder with an SA
installation for a variety of reasons that primarily boil down to
predictable results within your control.
regards,
KAM
Re: OT how to bypass public nameservers as bindforwarders?
Posted by Benny Pedersen <me...@junc.org>.
Den 2012-03-21 14:07, Jari Fredriksson skrev:
>> don't use public forwarders. unless you are doing 100K dns queries
>> per
>> day, just use bind and root zones.
>> if you want information on how to fix bind, then you need the bind
>> faq/man page/news group.
agre
> I used public forwarderds because app called "namebench" told me that
> they are faster. I need bind for my own LAN, but the rest is server
> as
> is fastest. One is google, other another public one, not google.
only use public forwards if there is problems with +trace, if so add
forwards pr zone, not global
> zone solutions is how I have it now. Let us see how it goes...
namebench needs updating anyway
Re: OT how to bypass public nameservers as bind forwarders?
Posted by Jari Fredriksson <ja...@iki.fi>.
21.3.2012 14:40, Michael Scheidell kirjoitti:
> On 3/21/12 8:24 AM, Jari Fredriksson wrote:
>> I use public DNS services as forwarders in my LAN dns (bind9). I
>> remember that once disabled forwarders for some URIBL but the setting is
>> gone, and I can't find a recipe.
>>
>> Howto?
>>
> don't use public forwarders. unless you are doing 100K dns queries per
> day, just use bind and root zones.
> if you want information on how to fix bind, then you need the bind
> faq/man page/news group.
>
>
I used public forwarderds because app called "namebench" told me that
they are faster. I need bind for my own LAN, but the rest is server as
is fastest. One is google, other another public one, not google.
zone solutions is how I have it now. Let us see how it goes...
--
Bridge ahead. Pay troll.
Re: OT how to bypass public nameservers as bind forwarders?
Posted by Michael Scheidell <mi...@secnap.com>.
On 3/21/12 8:24 AM, Jari Fredriksson wrote:
> I use public DNS services as forwarders in my LAN dns (bind9). I
> remember that once disabled forwarders for some URIBL but the setting is
> gone, and I can't find a recipe.
>
> Howto?
>
don't use public forwarders. unless you are doing 100K dns queries per
day, just use bind and root zones.
if you want information on how to fix bind, then you need the bind
faq/man page/news group.
--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
>*| *SECNAP Network Security Corporation
* Best Mobile Solutions Product of 2011
* Best Intrusion Prevention Product
* Hot Company Finalist 2011
* Best Email Security Product
* Certified SNORT Integrator
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.spammertrap.com/
______________________________________________________________________