Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
 Post subject: Linode DNSBL Service?
PostPosted: Wed Jun 10, 2015 12:30 am 
Offline
Senior Newbie
User avatar

Joined: Tue Jun 22, 2010 3:54 pm
Posts: 13
Does Linode have a DNSBL service?

My understanding is that to use one of the free DNSBL services you have to run a caching server locally to run queries. That's a nuisance. It would be a great plus if Linode subscribed to the various DNSBL services (and paid them as necessary).


Top
   
PostPosted: Wed Jun 10, 2015 3:01 am 
Offline
Senior Newbie
User avatar

Joined: Mon Mar 30, 2015 8:17 pm
Posts: 7
Website: http://technical.silverglass.org/
Location: San Diego, CA
You don't need a local caching server. I use the Spamhaus Zen list in Postfix just by including it in main.cf, and used to use SORBS the same way. Generally the caching servers are for commercial subscriptions (high-volume use), which you probably won't need unless your inbound e-mail traffic exceeds 100K messages/day.


Top
   
PostPosted: Wed Jun 10, 2015 7:09 am 
Offline
Senior Newbie

Joined: Wed Apr 15, 2015 4:25 am
Posts: 11
Website: http://www.bodhost.com/
Hi,

If the IP is listed in the DNS blacklist then the mail is rejected. You can go through several good lists - Spamhaus, SORBS, SCBL and CBL. You can list them under smtpd_recipient_restrictions = with the directive reject_rbl_client, for example:

smtpd_recipient_restrictions =
permit_sasl_authenticated,
(...),
reject_rbl_client multihop.dsbl.org,
(...),
permit

OR


you can list the DNSBL's under maps_rbl_domains and just add reject_maps_rbl to smtpd_recipient_restrictions:

maps_rbl_domains = zen.spamhaus.org,
dnsbl.sorbs.net,
list.dsbl.org,
bl.spamcop.net,
cbl.abuseat.org
smtpd_recipient_restrictions =
(...),
reject_maps_rbl,
permit

_________________
bodHOST


Top
   
PostPosted: Wed Jun 10, 2015 12:37 pm 
Offline
Senior Newbie
User avatar

Joined: Tue Jun 22, 2010 3:54 pm
Posts: 13
tknarr wrote:
You don't need a local caching server. I use the Spamhaus Zen list in Postfix just by including it in main.cf, and used to use SORBS the same way. Generally the caching servers are for commercial subscriptions (high-volume use), which you probably won't need unless your inbound e-mail traffic exceeds 100K messages/day.

But if everyone did this then eventually ns{1,2,3,...}.linode.com would be generating a lot of traffic and the DNSBL services would block them (unless they subscribed).

No?


Top
   
PostPosted: Wed Jun 10, 2015 4:19 pm 
Offline
Senior Member

Joined: Fri Feb 13, 2015 8:12 pm
Posts: 101
These are the usage terms for the Spamhaus DNSBLs:

http://www.spamhaus.org/organization/dnsblusage/

Quote:
Use of the Spamhaus DNSBLs via DNS queries to our public DNSBL servers is free of charge if you meet all three of the following criteria:

1) Your use of the Spamhaus DNSBLs is non-commercial*,
and
2) Your email traffic is less than 100,000 SMTP connections per day,
and
3) Your DNSBL query volume is less than 300,000 queries per day.

*Definition: "non-commercial use" is use for any purpose other than as part or all of a product or service that is resold, or for use of which a fee is charged. For example, using our DNSBLs in a commercial spam filtering appliance that is then sold to others requires a data feed, regardless of use volume. The same is true of commercial spam filtering software and commercial spam filtering services.

A company that uses our DNSBLs solely to filter their own email qualifies as a non-commercial user and may use our free public DNSBLs if that company's email volume and DNSBL query volume is below the free use limits. The same is true for any non-profit organization, school, religious organization, or private individual who operates their own mail server.


Running your own caching DNS server is a good idea anyway (as you help them to save bandwidth) and it's quite easy indeed. In Debian/Ubuntu with fixed IP it would be something like this:
Code:
apt-get install bind9
grep -v ^nameserver /etc/resolv.conf > /etc/resolv.conf.new
echo "nameserver 127.0.0.1" >> /etc/resolv.conf.new
mv /etc/resolv.conf.new /etc/resolv.conf

i.e. not something I would call a "nuisance".


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group