OFF TOPIC Re: Sorbs List on Bind Help

[Noel Butler]

On 12/04/2018 15:13, Klaipedaville on Google wrote:

> Hello list,
> 
> I was wondering if anybody could advise please, on the line below that I always seem to get in my Bind 9.8.4 logs:
> 
> error (unexpected RCODE SERVFAIL) resolving 'dul.dnsbl.sorbs.net/A/IN':174.36.198.232#53
> 
> I know what it generally stands for, that is the name server was unable to process this query due to a problem with the name server (according to RFC 1035, 4.1.1).
> 
> I am using ACL and I white-listed 174.36.198.232. I also white-listed and made sure the IP in question is not blocked anywhere else, like iptables and so on. However. I also notice that dul.dnsbl.sorbs.net has no A records so I think that this may not be the issue. Plus, I also noticed later that IP addresses changed regularly (it can be just about any other IP instead of where 174.36.198.232 is) so my white-listing was useless.
> 
> I would be really thankful if anybody could assist on the correct setting to allow my named (Bind) server to communicate with dul.dnsbl.sorbs.net as all the other DNSBLs etc. I use on my server work and resolve well.
> 
> I would appreciate any comments / pointers / help at all. 
> 
> Many thanks in advance!
> 
> Regards,
> Dennis

You're going about this all wrong. 

dul.dnsbl.sorbs.net will not have an A record, its not how dnsbl's
normally work. 

You placing them in an ACL makes no difference, SORBS is the one who
controls access to their resources, its SORBS server not answering you,
there is nothing you can do about it, though you shouldnt be querying a
particular SORBS NS, just the name itself. you should have no entries
anywhere for SORBS except in your SMTP/WWW_Module configs, like, for
example in postfix: 

reject_rbl_client dul.dnsbl.sorbs.net 

I wont go into the fact bind 9.8 is so old its unsupported :) 

-- 
Kind Regards, 

Noel Butler 

 		This Email, including any attachments, may contain legally privileged
information, therefore remains confidential and subject to copyright
protected under international law. You may not disseminate, discuss, or
reveal, any part, to anyone, without the authors express written
authority to do so. If you are not the intended recipient, please notify
the sender then delete all copies of this message including attachments,
immediately. Confidentiality, copyright, and legal privilege are not
waived or lost by reason of the mistaken delivery of this message. Only
PDF [1] and ODF [2] documents accepted, please do not send proprietary
formatted documents 

 

Links:
------
[1] http://www.adobe.com/
[2] http://en.wikipedia.org/wiki/OpenDocument
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20180412/34b70e23/attachment-0001.html>