MoinQ: spam/対策/rblsmtpd/dig

1. spamhaus.org の振る舞い

%dig -t txt 233.15.0.37.zen.spamhaus.org

返事のないリゾルバーもある。

https://blog.mailchannels.com/upcoming-change-from-spamhaus-will-make-march-1st-a-difficult-day-for-some

On February 11th, Spamhaus reminded its users that they would start to block queries sent from public Domain Name System (DNS) resolvers beginning on March 1st; blocked queries will receive a unique error code. Spamhaus will gain valuable insights about query volumes and customer distribution by forcing organizations to make queries from non-public DNS resolvers. Overall, we think this change is welcome and long overdue.

2. 返答例

spamhaus.org.           86400   IN      NS      musashi.spamhaus.com.
spamhaus.org.           86400   IN      NS      hideyoshi.spamhaus.com.
spamhaus.org.           86400   IN      NS      hideyoshi.spamhaus.net.
spamhaus.org.           86400   IN      NS      musashi.spamhaus.net.
spamhaus.org.           86400   IN      NS      musashi.spamhaus.org.
spamhaus.org.           86400   IN      NS      ns3.spamhaus.org.
spamhaus.org.           86400   IN      NS      hideyoshi.spamhaus.org.

sbl.spamhaus.org.       3600    IN      NS      a.gns.spamhaus.org.
sbl.spamhaus.org.       3600    IN      NS      b.gns.spamhaus.org.
sbl.spamhaus.org.       3600    IN      NS      c.gns.spamhaus.org.
sbl.spamhaus.org.       3600    IN      NS      d.gns.spamhaus.org.
sbl.spamhaus.org.       3600    IN      NS      e.gns.spamhaus.org.

3. whois

$ dig -t txt 233.15.0.37.sbl.spamhaus.org

; <<>> DiG 9.16.1-Ubuntu <<>> -t txt 233.15.0.37.sbl.spamhaus.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2591
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;233.15.0.37.sbl.spamhaus.org.  IN      TXT

;; ANSWER SECTION:
233.15.0.37.sbl.spamhaus.org. 60 IN     TXT     "https://www.spamhaus.org/sbl/query/SBL538362"

;; Query time: 155 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: 金  3月 25 19:11:37 JST 2022
;; MSG SIZE  rcvd: 114

4. history

$ dig -t txt 233.15.0.37.sbl.spamhaus.org

; <<>> DiG 9.11.3-1ubuntu1.16-Ubuntu <<>> -t txt 233.15.0.37.sbl.spamhaus.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41492
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;233.15.0.37.sbl.spamhaus.org.  IN      TXT

;; Query time: 18 msec
;; SERVER: 210.188.224.10#53(210.188.224.10)
;; WHEN: Fri Mar 25 19:11:50 JST 2022
;; MSG SIZE  rcvd: 57

5. gns.spamhaus.org

$ dig -t txt 233.15.0.37.zen.spamhaus.org @a.gns.spamhaus.org.

; <<>> DiG 9.11.3-1ubuntu1.16-Ubuntu <<>> -t txt 233.15.0.37.zen.spamhaus.org @a.gns.spamhaus.org.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61130
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 2048
;; QUESTION SECTION:
;233.15.0.37.zen.spamhaus.org.  IN      TXT

;; ANSWER SECTION:
233.15.0.37.zen.spamhaus.org. 60 IN     TXT     "https://www.spamhaus.org/sbl/query/SBL538362"
233.15.0.37.zen.spamhaus.org. 60 IN     TXT     "https://www.spamhaus.org/query/ip/37.0.15.233"

;; Query time: 101 msec
;; SERVER: 66.42.66.49#53(66.42.66.49)
;; WHEN: Fri Mar 25 19:16:01 JST 2022
;; MSG SIZE  rcvd: 172

a.gns.spamhaus.org.     532     IN      A       207.246.108.138
a.gns.spamhaus.org.     532     IN      A       66.42.66.49
a.gns.spamhaus.org.     532     IN      A       171.66.2.21
a.gns.spamhaus.org.     532     IN      A       149.28.204.60

CategoryDns CategoryWatch CategoryTemplate