Root Cause Analysis (in order):

1) DNSWL does not provide blocked codes.  That deviates from most DNS-query 
based systems.

On 24.09.24 20:43, Matthias Leisi wrote:
This is wrong.

I have checked with 1.1.1.1, where queries only return 127.0.10.3

It would help SA (and perhaps also DNSWL) if DNSWL would return 127.0.0.255 in addition to 127.0.10.3

- there is already rule to suspend

header      RCVD_IN_DNSWL_BLOCKED   eval:check_rbl_sub('dnswl-firsttrusted', 
'^127\.0\.\d+\.255$')
dns_block_rule RCVD_IN_DNSWL_BLOCKED list.dnswl.org


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Fighting for peace is like fucking for virginity...

Reply via email to