We run a local rbldnsd daemon on the mail server and have an update
script to add/modify whitelisted domain names with a bitmask of 0 in the
multi.surbl.org.rbldnsd list whenever it is rsynced. (example:
"upenn.edu :127.0.0.0:Whitelisted")
This way spamd does not take up extra memory in each of its process (6
running) and just increase rbldnsd memory usage. This is redundant but
it prevents against accidental blacklisting on any of the SURBLs and
satisfies the business managers.
We also modify the URIDNSBL.pm in spamassassin to use DNS lookup with a
local resolv.conf file containing 127.0.0.1 so that rbldnsd can run in
the mail server without affecting normal DNS lookup operations. This
isn't documented anywhere but it could be a useful feature to allow
URIDNSBL.pm to choose the resolving hosts instead of using the system
default.
--
Tomo Takebe
University of Pennsylvania
ISC/Networking
Alex Broens wrote:
> Chris Santerre wrote:
>
>> OK, we know that the popular domains like yahoo.com and such are hard
>> coded
>> into SA to be skipped on DNSRBL lookups. But it would be great to have a
>> function to add more locally.
>> Thinking one step bigger, it would be even better to feed this a file.
>> This
>> way maybe SURBL can create a file for the top hit legit domains. Then
>> using
>> SARE and RDJ, people could update that. This would reduce a lot of
>> traffic
>> and time.
>>
>> This might also help with the mysterious bug we have seen where some
>> local
>> domains are being flagged as SURBL hit, when they aren't in SURBL.
>> Perhaps
>> whitelisting local domains so they are skipped would do away with this.
>> Thoughts, suggestions, or coffee?
>
>
> First, where's that coffee?
>
> then: I keep a .cf file with a quite a few lines like.
>
> uridnsbl_skip_domain ibill.com blabla.tld local-boobie-site.dom
>
> I assume that if you pick up Jeff's white list and transform that into a
> .cf then we'll see the sa-blacklist effect, LOTS of ram needed.
> For local domains and those you see most according to your client base
> the above works fine (for me)
>
>
> more coffee?
>
> Alex
>
>
> _______________________________________________
> Discuss mailing list
> Discuss@lists.surbl.org
>
http://lists.surbl.org/mailman/listinfo/discuss
