I'm looking for RBL/DNS Server and RBL list

['chris']

hi

I'm using watchguard firewall with the spamscreen to stop the spam.
What I need is the IP address of the RBL/DNS Server and RBL list to setup spamscreen.
Know someone, where can I get it ?
Using RBL/DNS Server and RBL list is it for free or I have to pay for it ?
Has someone any experience with RBL/DNS ?

kind regards
chris

[Martin P.J. Zinser]

Hello Chris,

here is the list of servers I use in my SMTP server:

RBLs: rbl.maps.vix.com, dul.maps.vix.com, relays.orbs.org, bl.spamcop.net
RBLs: cbl.abuseat.org dnsbl.njabl.org dnsbl.sorbs.net

They are all free to use. Most probably the exact format of the config entry for spamscreen will be different, as this comes from a VMS system ;-)

Have a nice weekend,

Martin

['chris']

hi martin

and which DNS do you use, own or from ISP ?
did you setup the zones of RBL/DNS Server
on your DNS server or the are already setuped
on the DNS from your ISP ?
do you use SpamScreen also ?

the manual of spamscreen says :

"Addresses you enter in the RBL list must reference a special-purpose DNS server that is specifically designated as an RBL server. A normal DNS server will not function correctly.
SpamScreen first checks the message against the RealTime BlackHole List (RBL).
The RBL is a name server that has DNS records for sites considered to be spammers,
spam relays, or spam-friendly service providers. If the message originates from an
address on the RBL, SpamScreen marks the message as spam "

I have to put at the SpamScreen configuration
IP address of RBL/DNS Server and RBL lists.
RBL list are clear for me and I have to put names like rbl.maps.vix.com, but NOT the RBL/DNS Server.

I've tried already with my internal DNS server and DNS server from ISP, but it sems not to work properly.
SpamScreen doesn't stop SPAM mails.

kind regards
chris

['chris']

the log of SpamScreen says:

7683268 10/01/04 10:09:46 y spamscreen[156] WatchGuard spamscreen server v7.0.B1366 (C) 1996-2003 WGTI
7683278 10/01/04 10:09:46 y spamscreen[156] Warning, server 10.41.1.10 may be incorrect

if I put as RBL/DNS Server the IP of ISP DNS sever I get also the message:
Warning, server X.X.X.X may be incorrect

regards
chris

[Martin P.J. Zinser · Accepted solution]

Hello Chris,

well DNS (Domain Name System) is used to translate numeric IP addresses to names and vice versa. That is what the DNS server of your ISP is providing for you. It is not suitable as an RBL (Real Time Blackhole list).

How does an RBL work? Well, the only part in an SMTP header coming from a client that can not be very easily forged is the numeric IP address of the sender. So an RBL keeps a list of addresses known to be used by SPAMmers. Now the problem arises how you can find out if the address is on the list of the RBL. This is where the DNS protocol gets "reused". You put in your spamscreen config the servers (or similar ones) I have given earlier. This sends a DNS request for the address of the incoming mail to the RBL server. If it is on the list the address is resolved and spamscreen will mark it as SPAM.

Greetings, Martin

['chris']

hi martin

thanks for the information.

can I add some spam mail addresses
to the RBL lists ?

kind regards
chris

[muhanned]

Hi Martine ,

I would like to confirme the followings

1- Add the DNS server of my ISP

2- Add the RBL server on my anti spam engine

Please confirme and if you have any other documents please privide .


Thanks

muhanned