Re: consolidating DNSBLs into a single query (was Spam Eating Monkey?)

[Royce Williams <ro...@gmail.com>]

On Tue, Oct 6, 2009 at 8:19 PM, Rob McEwen <ro...@invaluement.com> wrote:
> Warren Togami wrote:
>> You are misunderstanding the question.  A single DNS query could
>> respond different numbers meaning they are hits on different lists.
>> Your lists that are subsets or supersets of other lists can easily use
>> this.  The querying software need only to know what each result means.
>
> Not saying that this is a bad idea, but it does have its limitations.
> For example, some lists are into the hundreds of megabytes large, and
> getting the whole file rsncned and updated can take more than several
> minutes. Often, such lists update only once or twice per hour, if even
> that often.

Hmm ... interesting.  If implemented via rbldnsd, each list could be
maintained in a separate file, and since rbldnsd can be configured to
build a single zone using multiple files on the back end, different
lists could be refreshed at different rates.

Your comments about tradeoffs and bitmasking still stand, of course.

Royce