On Tuesday, August 3, 2004, 1:25:51 PM, Steven Champeon wrote:
on Tue, Aug 03, 2004 at 10:06:09PM +0200, Patrik Nilsson wrote:
Anyway - this is why urirhsbl is such a good idea. All of those domains use the same SBL-listed name server IP.
Yep, agreed.
Actually it's uridnsbl that looks at name server IPs (for example from sbl.spamhaus.org) and yes, it's a good way to catch the spam gangs who register thousands of domains... but host them all on the same name servers. uridnsbl lets you catch (spammer) domains that use those (spammer) name servers.
urirhsbl and urirhssub are for use with SURBLs and don't do name resolution.
uridnsbl resolves NS records and checks them against an RBL.
Somewhat confusingly, all three programs are in the same PM called URIDNSBL or URIBL.
Jeff C.