You are not logged in.

#1 2019-12-09 3:33 am

killer85
Member
Registered: 2019-12-09
Posts: 2

Blacklist question

Hi, I'm new to the forum, greetings to all.
My question is the following:
I have an unrealircd server with a block of blacklists, I would like to add the one from this site, what should I add in the dnsbl block?

Offline

#2 2019-12-09 8:34 am

pedigree
uıɐbɐ ʎɐqǝ ɯoɹɟ pɹɐoqʎǝʞ ɐ buıʎnq ɹǝʌǝu ɯ,ı
From: New Zealand
Registered: 2008-04-16
Posts: 7,056

Re: Blacklist question

for IP yes, you can query IP in rbl using the standard IP reserval lookup.

ie checking for 1.2.3.4 

will be a lookup at

4.3.2.1.i.rbl.stopforumspam.org

which gives

# nslookup 4.3.2.1.i.rbl.stopforumspam.org

Non-authoritative answer:
Name:   4.3.2.1.i.rbl.stopforumspam.org
Address: 127.3.42.1

127 = listed
3 = seen 3 times
42 = last seen 42 days ago
1 = 1% change its spam

IPs not listed will give you a NXDOMAIN response

Offline

#3 2019-12-09 4:01 pm

killer85
Member
Registered: 2019-12-09
Posts: 2

Re: Blacklist question

Hello pedigree.
The blacklist not work me and detects nothing, i have this in me block:

blacklist blblocklist {
    dns {
        name xx.68.99.192.i.rbl.stopforumspam.org;
        type record;
        reply { 1; 2; 3; 4; 5; 6; 7; 8; 9; 10; 13; 14; 15; 17; 100; 255; };
    };
        action gline;
    ban-time 7d;
    reason "STOPFORUMSPAM";
};

xx.68.99.192 this is me reverse ip 4.3.2.1

Please help

Offline

#4 2019-12-09 6:30 pm

Alex Kemp
Moderator
From: Nottingham, England
Registered: 2009-12-02
Posts: 2,423
Website

Re: Blacklist question

You have been shown a generic method using nslookup. You cannot expect support on some other method; apply to whatever source you got it from if you expect support.

Here are my tests:

190.46.106.13 (no result):

:~$ nslookup 13.106.46.190.i.rbl.stopforumspam.org
Server:		194.168.4.100
Address:	194.168.4.100#53

** server can't find 13.106.46.190.i.rbl.stopforumspam.org: NXDOMAIN

58.65.223.79 (confirmed spammer):

:~$ nslookup 79.223.65.58.i.rbl.stopforumspam.org
Server:		194.168.4.100
Address:	194.168.4.100#53

Non-authoritative answer:
Name:	79.223.65.58.i.rbl.stopforumspam.org
Address: 127.2.21.1

# 127 = listed
# seen 2 times
# last seen 21 days ago

Offline

Board footer

Powered by FluxBB

Close
Close