RBL Anyone?

View: New views
7 Messages — Rating Filter:   Alert me  

RBL Anyone?

by Curtis Maurand :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Has anyone ever used PDNS to host an internal RBL.  I'd like to cut down my traffic to spamhaus before I have to start paying them a big fee.  I can harvest addresses from a mail log and put them into a zone with an A record of 127.0.0.2.

--Curtis


_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: RBL Anyone?

by Tyler Hall-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Yes, it works, why wouldn't it?  RBLs just do DNS lookups and look for an answer.

OT -- The only problem with having your own RBL is when will you know to remove the listing?  You will end up blocking people longer then they should be.    I've been in spamhaus before on accident, if I emailed you during that time, I'd never be able to email you again unless you plan on flushing out the table every few days.   Just think about the stuff like that.



On Wed, Oct 14, 2009 at 9:06 AM, Curtis Maurand <curtis@...> wrote:
Has anyone ever used PDNS to host an internal RBL.  I'd like to cut down my traffic to spamhaus before I have to start paying them a big fee.  I can harvest addresses from a mail log and put them into a zone with an A record of 127.0.0.2.

--Curtis


_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users



_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: RBL Anyone?

by Brendan Oakley :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I use the BIND backend for this. I've wondered what the performance
would be like on a db backend, since we have very heavily loaded
incoming MTA's.

I've thought about possibly porting the rbldnsd code to a PowerDNS
backend, but haven't had time yet to look at it closely.

Brendan
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: RBL Anyone?

by Curtis Maurand :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

so I'm assuming that my zone would be named something like rbl.mydomain.com
and then each IP address that I would block would have an ip address of 127.0.0.2?

insert into records (domain_id, name, type,  content)  values  ('<zone_id>',  '192.168.35.2' , 'A', '127.0.0.2')

Is this correct?

Its a given that I would periodically have to purge, but I'd rather have the system check against the localhost, then zen.spamhaus.org, then others.




Tyler Hall wrote:
Yes, it works, why wouldn't it?  RBLs just do DNS lookups and look for an answer.

OT -- The only problem with having your own RBL is when will you know to remove the listing?  You will end up blocking people longer then they should be.    I've been in spamhaus before on accident, if I emailed you during that time, I'd never be able to email you again unless you plan on flushing out the table every few days.   Just think about the stuff like that.



On Wed, Oct 14, 2009 at 9:06 AM, Curtis Maurand <curtis@...> wrote:
Has anyone ever used PDNS to host an internal RBL.  I'd like to cut down my traffic to spamhaus before I have to start paying them a big fee.  I can harvest addresses from a mail log and put them into a zone with an A record of 127.0.0.2.

--Curtis


_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users




_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: RBL Anyone?

by Brendan Oakley :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On Wed, Oct 14, 2009 at 11:09 AM, Curtis Maurand wrote:
> so I'm assuming that my zone would be named something like rbl.mydomain.com
> and then each IP address that I would block would have an ip address of
> 127.0.0.2?
>
> insert into records (domain_id, name, type,  content)  values
> ('<zone_id>',  '192.168.35.2' , 'A', '127.0.0.2')
>
> Is this correct?

Ordinarily you reverse the octets: '2.35.168.192'.

Brendan
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: RBL Anyone?

by Patrick Domack :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

('zone_id','2.35.168.192.rbl.domain.com','A','127.0.0.2')

I do this for emails, I run greylisting, and if I get >x attempts over  
2 days and no emails have passed from that ip for 2weeks, they get put  
on the rbl. If the reverse dns for that ip changes, or a year passes,  
they are removed. It seems to work very well for me. Originally it was  
designed to keep the load off the greylisting database, and is  
currently running around 1.3million ip's

Quoting Curtis Maurand <curtis@...>:

> so I'm assuming that my zone would be named something like rbl.mydomain.com
> and then each IP address that I would block would have an ip address  
> of 127.0.0.2?
>
> insert into records (domain_id, name, type,  content)  values  
> ('<zone_id>',  '192.168.35.2' , 'A', '127.0.0.2')
>
> Is this correct?
>
> Its a given that I would periodically have to purge, but I'd rather  
> have the system check against the localhost, then zen.spamhaus.org,  
> then others.
>
>
>
>
> Tyler Hall wrote:
>> Yes, it works, why wouldn't it?  RBLs just do DNS lookups and look  
>> for an answer.
>>
>> OT -- The only problem with having your own RBL is when will you  
>> know to remove the listing?  You will end up blocking people longer  
>> then they should be.    I've been in spamhaus before on accident,  
>> if I emailed you during that time, I'd never be able to email you  
>> again unless you plan on flushing out the table every few days.    
>> Just think about the stuff like that.
>>
>>
>>
>> On Wed, Oct 14, 2009 at 9:06 AM, Curtis Maurand <curtis@...  
>> <mailto:curtis@...>> wrote:
>>
>>    Has anyone ever used PDNS to host an internal RBL.  I'd like to
>>    cut down my traffic to spamhaus before I have to start paying them
>>    a big fee.  I can harvest addresses from a mail log and put them
>>    into a zone with an A record of 127.0.0.2.
>>
>>    --Curtis
>>
>>
>>    _______________________________________________
>>    Pdns-users mailing list
>>    Pdns-users@...
>>    <mailto:Pdns-users@...>
>>    http://mailman.powerdns.com/mailman/listinfo/pdns-users
>>
>>
>
>



_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Parent Message unknown Re: RBL Anyone?

by Curtis Maurand :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Thanks.  Much appreciated.

-----Original Message-----
From: "Patrick Domack" <patrickdk@...>
To: pdns-users@...
Sent: 10/15/2009 6:40 AM
Subject: Re: [Pdns-users] RBL Anyone?

('zone_id','2.35.168.192.rbl.domain.com','A','127.0.0.2')

I do this for emails, I run greylisting, and if I get >x attempts over  
2 days and no emails have passed from that ip for 2weeks, they get put  
on the rbl. If the reverse dns for that ip changes, or a year passes,  
they are removed. It seems to work very well for me. Originally it was  
designed to keep the load off the greylisting database, and is  
currently running around 1.3million ip's

Quoting Curtis Maurand <curtis@...>:

> so I'm assuming that my zone would be named something like rbl.mydomain.com
> and then each IP address that I would block would have an ip address  
> of 127.0.0.2?
>
> insert into records (domain_id, name, type,  content)  values  
> ('<zone_id>',  '192.168.35.2' , 'A', '127.0.0.2')
>
> Is this correct?
>
> Its a given that I would periodically have to purge, but I'd rather  
> have the system check against the localhost, then zen.spamhaus.org,  
> then others.
>
>
[truncated by sender]
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users