At 15:43 2004-08-03 -0700, Jeff Chan wrote:
Actually it's uridnsbl that looks at name server IPs (for example from sbl.spamhaus.org) and yes, it's a good way to catch the spam gangs who register thousands of domains... but host them all on the same name servers. uridnsbl lets you catch (spammer) domains that use those (spammer) name servers.
urirhsbl and urirhssub are for use with SURBLs and don't do name resolution.
uridnsbl resolves NS records and checks them against an RBL.
Somewhat confusingly, all three programs are in the same PM called URIDNSBL or URIBL.
Sorry - yes, you are right. Both in uridnsbl being what I meant to refer to and to it all being somewhat confusing... :-)
Still, it's a great PM....
Patrik