<?xml version="1.0" encoding="iso-8859-1" standalone="yes" ?>
<rss version="2.0">
<channel>
<title>RBL ZA - Open questions</title>
<description>South African Black Lists</description>
<link>http://www.rbl.org.za</link>
	<item>
		<title><![CDATA[Hello, I hope you will find some time and ... (Timo)]]></title>
		<description><![CDATA[Hello,
I hope you will find some time and give me some advices how to
configure my server correctly to work with bind9 and rbldnsd as a
block list. I am trying to figure it out for several weeks now. It
must be a understanding problem in the way how the deamon works.

My setup:
I have 3 servers, all running on a VM host as a seperated VM on it.
One is the rbldnsd with bind9. The second server has a postfix running
on it, but that is not important for my test. The third server is
configured to ask the DNS for a block list and drops the connection of
a asking blocked host. So I fire up a telnet port 25 to the
checkserver and now there should be a drop.

That is what I configured until now:
Bind named.conf
Code:

include "/etc/bind/named.conf.options";
include "/var/db/rbldnsd/bind.zones";
// prime the server with knowledge of the root servers
zone "." {
      type hint;
      file "/etc/bind/db.root";
};

// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912

zone "localhost" {
      type master;
      file "/etc/bind/db.local";
};

zone "127.in-addr.arpa" {
      type master;
      file "/etc/bind/db.127";
};

zone "0.in-addr.arpa" {
      type master;
      file "/etc/bind/db.0";
};

zone "255.in-addr.arpa" {
      type master;
      file "/etc/bind/db.255";
};

include "/etc/bind/named.conf.local";


//zone "clients.blocked.rbl" IN {
//type forward;
//forward first;
//forwarders {
//10.111.10.104; # (OR """127.0.0.1 port 530;""" if bind and RBLDNSD
are on the same server)
//};
//};

//zone "hosts.blocked.rbl" IN {
//type forward;
//forward first;
//forwarders {
//10.111.100.104; # (OR """127.0.0.1 port 530;""" if bind and RBLDNSD
are on the same server)
//};
//};

named.conf.local:
Code:

zone "mais1test.de" {
type master;
file "/etc/bind/db.mais1test.de";
};

zone "10.111.10.in-addr.arpa" {
type master;
file "/etc/bind/db.10.111.10";
};

/var/db/rbldnsd/bind.zones:
Code:

zone "testbl.mais1.de" IN {
      type forward;
      forward first;
      forwarders { 127.0.0.1 port 530; };
 };

/etc/default/rbldnsd:
Code:

RBLDNSD="- -r/var/db/rbldnsd -b127.0.0.1/530 \
testbl.mais1.de:ip4set:datafile.txt \
"

Yesterday I tried to write the string of RBLDNSD more clearly (a
seperated line for each command with \ at the end of each line) and
now I get this mistake:

Starting rbldnsd: rbldnsd
rbldnsd: no zone(s) to service specified (-h for help)

My Blocklist is actually build like this:
Code:

$TTL 10s
 :127.0.0.2:
127.0.0.0/8 Okay it works.
!127.0.0.1
10.111.10.111

I made the configuration by following these short instructions. There
were other howtos I used before.
http://www.techtheft.info/book/dnsbl...bian&show=Show
I changed 127.0.0.3 to 127.0.0.1 and set the port to 530 for rbldnsd.
I am not that much experienced in troubleshooting under Linux systems
and in addition to that I don't have that much knowledge about the
topic. I got that task to learn it.
thanks for reading.
regards, Timo]]></description>
		<link>http://www.rbl.org.za/index.php?action=open#openq_1</link>
		<pubDate>Tue, 24 May 2011 09:11:00 GMT</pubDate>
	</item>
</channel>
</rss>
