spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Axb <axb.li...@gmail.com>
Subject Re: URIBL_RHS_DOB high hits
Date Tue, 07 Oct 2014 11:12:02 GMT
On 10/07/2014 01:01 PM, Reindl Harald wrote:
>
>
> Am 07.10.2014 um 12:53 schrieb Axb:
>> On 10/07/2014 12:40 PM, Reindl Harald wrote:
>>> Am 06.10.2014 um 19:06 schrieb Axb:
>>>> On 10/06/2014 07:01 PM, David Jones wrote:
>>>>> Anyone else seeing an unusually high hit count today for
>>>>> URIBL_RHS_DOB?
>>>>>> >
>>>>>> >
>>>> host  google.com.dob.sibl.support-intelligence.net
>>>> Host google.com.dob.sibl.support-intelligence.net not found:
>>>> 3(NXDOMAIN)
>>>>
>>>> "web tools" <sigh>
>>>
>>> not that it was not junk but created 10 years ago
>>>
>>> Date: Tue, 07 Oct 2014 12:00:47 +0200
>>> 1.0 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread)
>>> *      [URIs: emms.com]
>>>
>>>     Domain Name: EMMS.COM
>>>     Registrar: REGISTRYGATE GMBH
>>>     Whois Server: whois.registrygate.com
>>>     Referral URL: http://www.registrygate.com
>>>     Name Server: NS1.DNSSOCKET.NET
>>>     Name Server: NS2.DNSSOCKET.NET
>>>     Status: clientTransferProhibited
>>>     Updated Date: 02-jul-2014
>>>     Creation Date: 06-may-2004
>>>     Expiration Date: 06-may-2015
>>>
>>
>> host emms.com.dob.sibl.support-intelligence.net
>> Host emms.com.dob.sibl.support-intelligence.net not found: 3(NXDOMAIN)
>>
>> funky resolver?
>
> unbound on localhost with adjusted caching to avoid DNS mistakes hit for
> many hours, i get 3 respones one of them with 127.0.0.2 and two with
> NXDOMAIN and exactly the same result on the LAN cache running BIND while
> both do recursion and not forwarding
>
>   cache-min-ttl: 300
>   cache-max-ttl: 3600
>
> host  emms.com.dob.sibl.support-intelligence.net
> emms.com.dob.sibl.support-intelligence.net has address 127.0.0.2
> Host emms.com.dob.sibl.support-intelligence.net not found: 3(NXDOMAIN)
> Host emms.com.dob.sibl.support-intelligence.net not found: 3(NXDOMAIN)
>
> host  emms.com.dob.sibl.support-intelligence.net
> emms.com.dob.sibl.support-intelligence.net has address 127.0.0.2
> Host emms.com.dob.sibl.support-intelligence.net not found: 3(NXDOMAIN)
> Host emms.com.dob.sibl.support-intelligence.net not found: 3(NXDOMAIN)

I'm testing from 3 different sites/networks with PowerDNS recursor and 
all give me a single NXDOMAIN





Mime
View raw message