How to test for properly setup RBL+ Mail-Abuse Service - was:Re: Mail-abuse RBL+ in place, no action
Stefan Seiz
to help the ones which can't get RBL+ Subscriptions to work here is how to
test.
In this example, we assume MAPS has configured their DNS to allow my DNS
called ns1 to query their DNS. They don't allow my DNS called ns2 to query.
Based on these assumptions, we do the following tests using the "dig"
command on unix/linux.
To do a testquery on a specific IP, the query is formulated in reverse. So
assume you wan't to query if 10.0.1.1 is listed on rbl+, you'd query their
nameservers for an A-Record on the fictious domainname:
1.1.0.10.rbl-plus.mail-abuse.org
In the examples below, i am querying on an IP Address, known to be listed in
RBL+ because it is an IP used for DIALUP accounts of german t-online. So if
you do your tests, you can use the same query (against your own nameservers
of course) to make sure you get a result from maps.
If you query for any other IP Address, not listed on RBL+, you won't get
back any A-Record at all which DOESN'T mean your RBL+ Setup doesn't work. So
it is essential to do the tests with actual IP Numbers which are known to be
listed in the RBL+ Blacklist.
Testquery using the proper DNS (the one which is allowed into MAPS DNS):
========================================================================
dig @ns1 119.120.145.80.rbl-plus.mail-abuse.org a
; <<>> DiG 8.3 <<>> @ns1 119.120.145.80.rbl-plus.mail-abuse.org a
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 2
;; QUERY SECTION:
;; 119.120.145.80.rbl-plus.mail-abuse.org, type = A, class = IN
;; ANSWER SECTION:
119.120.145.80.rbl-plus.mail-abuse.org. 4m1s IN A 127.1.0.2
;; AUTHORITY SECTION:
rbl-plus.mail-abuse.org. 5d23h59m1s IN NS east1.mail-abuse.org.
rbl-plus.mail-abuse.org. 5d23h59m1s IN NS west1.mail-abuse.org.
rbl-plus.mail-abuse.org. 5d23h59m1s IN NS europe1.mail-abuse.org.
;; ADDITIONAL SECTION:
east1.mail-abuse.org. 5m39s IN A 157.22.13.82
europe1.mail-abuse.org. 5h28m8s IN A 204.152.186.195
;; Total query time: 8 msec
;; FROM: XXXXX to SERVER: ns XXXXX
;; WHEN: Thu Apr 24 10:35:43 2003
;; MSG SIZE sent: 56 rcvd: 166
Testquery using the wrong DNS (the one which is NOT allowed into MAPS DNS):
============================================================================
dig @ns2 119.120.145.80.rbl-plus.mail-abuse.org a
; <<>> DiG 8.3 <<>> @ns2.imd.net 119.120.145.80.rbl-plus.mail-abuse.org a
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;; 119.120.145.80.rbl-plus.mail-abuse.org, type = A, class = IN
;; Total query time: 505 msec
;; FROM: XXXXX to SERVER: ns2 XXXXX
;; WHEN: Thu Apr 24 10:35:54 2003
;; MSG SIZE sent: 56 rcvd: 56
Now if you know the nameserver IP (your Nameserver) which you passed to MAPS
and which they should allow to query their DNS, and you can't successfully
query their RBL+ Blacklist using the test outlined above, then definitively,
MAPS doesn't let you query - aka hasn't configured their DNS properly to let
you in. Contact MAPS to fix this.
HTH
Stefan
--
Stefan Seiz <http://www.StefanSeiz.com>
Spamto: <b...@imd.net>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <CGat...@mail.stalker.com>.
To unsubscribe, E-mail to: <CGateP...@mail.stalker.com>
To switch to the DIGEST mode, E-mail to <CGatePr...@mail.stalker.com>
To switch to the INDEX mode, E-mail to <CGatePr...@mail.stalker.com>
Send administrative queries to <CGatePro...@mail.stalker.com>