[Raw Msg Headers][Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: RBLs and TXT RRs



Hi!

On Thu, Nov 06, 2003 at 16:31 -0300, Mariano Absatz wrote:

> I only have a test setup on a production server where I only "log" (not 
> reject).
> 
> The portion of smtp-policy.src looks like:
> ======================================================================
> .             relaycustomer - relaytarget - senderokwithdns + = _rbl1
> [0.0.0.0]/0   relaycustomer - relaytarget - senderokwithdns + = _rbl0
> # log open proxies
> _rbl0   rcpt-dns-rbl    pss.spambusters.org.ar
> _rbl1       # but don't reject
> ======================================================================
> 
> Now, in my smtpserver log, I have:
> Looking up DNS A object: 153.62.47.200.pss.spambusters.org.ar
> (for non-found addresses) and
> Looked up DNS A object: 12.55.232.24.relays.ordb.org -> 127.0.0.2
> (for found addresses).

Nothing else will be logged until "_rbl1 test-rcpt-dns-rbl +" is used
for rejection or debugging is turned on.

Oops...
FUbBKy20024w    550 5.7.1 Hello [212.9.225.171], Policy analysis reported: this is message from rbl END- rcpt=<bag@i.kiev.ua>

while: 
host -t txt 171.225.9.212.rbl.zn.iptelecom.net.ua.
171.225.9.212.rbl.zn.iptelecom.net.ua text "this is message from rbl END-2"

last character "2" is lost...
bug in dnsmxlookup() T_TXT type processing?






> 
> Now, If I manually do:
> # host -t txt 12.55.232.24.relays.ordb.org
> 12.55.232.24.relays.ordb.org descriptive text "This mail was handled by \ 
>     an open relay - please visit \
>     <http://ORDB.org/lookup/?host=24.232.55.12>"
> 
> It'd be nice to be able to put the content of this record in a rejection:
> 550 5.7.1 This mail was handled by an open relay - please visit \
>     <http://ORDB.org/lookup/?host=24.232.55.12>
> 
> 
> but the TXT RR is never queried (and thus, nor even logged)...
> 
> El 6 Nov 2003 a las 20:49, Matti Aarnio escribió:
> 
> > On Thu, Oct 16, 2003 at 12:41:16AM +0300, Matti Aarnio wrote:
> > > On Wed, Oct 15, 2003 at 06:00:34PM -0300, Mariano Absatz wrote:
> > > > Hi,
> > > > 
> > > > is there any way, when a DNSBL has a TXT informative RR (as well as the 
> > > > customary A RR), to include the text of that RR in the rejection?
> > > > 
> > > > Is there at least a way to _log_ that info when available?
> > > 
> > > Without looking into the code right now, I recall that it was
> > > written to yield rejection only, when it gets TXT RR.
> > > 
> > > It is possible, of course, that over time the code has
> > > been broken in this regard, and/or the return message is
> > > overwritten somehow.
> > 
> > I have been going these thru in a haphazard manner, reading
> > list archive and wondering if things are really handled or not..
> > 
> > The more I read the related code, the more I think that
> > 'bag' gave me some diff that broke something.
> > 
> > How are you using it ?  Which test attributes ?
> > 
> > > > TIA.
> > > > Mariano Absatz
> > > > El Baby
> > 
> > /Matti Aarnio	<mea@nic.funet.fi>
> 
> 
> --
> Mariano Absatz
> El Baby
> ----------------------------------------------------------
> "Only wimps use tape backup: _real_ men just upload their important stuff"
> on ftp and let the rest of the world mirror it."
>                           -- Linus Torvalds
> 
> 
> -
> To unsubscribe from this list: send the line "unsubscribe zmailer" in
> the body of a message to majordomo@nic.funet.fi
-
To unsubscribe from this list: send the line "unsubscribe zmailer" in
the body of a message to majordomo@nic.funet.fi