Koozali.org: home of the SME Server

Obsolete Releases => SME Server 8.x => Topic started by: compdoc on June 20, 2012, 02:14:32 PM

Title: How to test RHSBL and SBLList servers?
Post by: compdoc on June 20, 2012, 02:14:32 PM

I have servers in my RHSBL and SBLList lists that may no longer be working. For instance according to forum posts found on Google, it looks as if mailpolice.com stopped working sometime in 2010.

If I search the log files in /var/log/qpsmtpd/ for the word 'police' nothing turns up. This is also true for searches of a few other servers in my RHSBL and SBLList lists.

Is there a log of look-ups for RHSBL and SBLList queries? How can I tell if my server is wasting its time testing against RHSBL and SBLList lists that aren't working, or working so little as to be useless?

Thanks.

Title: Re: How to test RHSBL and SBLList servers?
Post by: Stefano on June 20, 2012, 02:23:53 PM

Code: [Select]

config setprop qpsmtpd LogLevel 8
signal-event email-update

after that, you should grep qpsmtpd log

HTH

Title: Re: How to test RHSBL and SBLList servers?
Post by: mmccarn on June 20, 2012, 03:31:40 PM

I believe that the result for an unblocked mailhost on a valid DNSBL service is the same as the result for any host on a non-existent DNSBL service.

That is, the following two commands generate the same results:
nslookup 105.3.12.83.combined.njabl.org
nslookup 107.3.12.83.combined.njabl.omg

Compared to this query, which returns a positive results (as of this writing):
nslookup 107.3.12.83.combined.njabl.omg

I believe that DNSBL sends a query simultaneously to all of the configured DNSBL servers, then waits for a reply.  The lack of a positive reply in the timeout period (which looks like 30 seconds, from the contents of /usr/share/qpsmtpd/plugins/dnsbl) causes dnsbl to reply 'DECLINE', which allows the message process to continue.

http://rbls.org can be used to show you the results from many different rbls for any IP or domain name.

Title: Re: How to test RHSBL and SBLList servers?
Post by: compdoc on June 21, 2012, 07:02:25 PM

In the end I performed a combination of things:

1) searched the logs for matches on parts of the names of the servers in my RBLList and SBLList lists
2) searched google for each service's name and read what ppl had to say about them
3) tried to visit the websites for each server like mailpolice.com, as well as try to ping them
4) visited sites that track their performance

I removed the following servers because they no longer exist, or were blocking 0 to 3 emails in all of my log files so arent worth wasting my server's time:

Failed RBLList servers:

dnsbl-1.uceprotect.net
list.dsbl.org
multihop.dsbl.org


Failed SBLList servers:

black.uribl.com
bulk.rhs.mailpolice.com
fraud.rhs.mailpolice.com
porn.rhs.mailpolice.com
adult.rhs.mailpolice.com
ex.dnsbl.org