Re: [cobalt-users] re: cobalt-users digest, Vol 1 #6889 - 15 msgs

[Jeff Lasman <blists@xxxxxxxxxxxxx>]

On Tuesday 13 April 2004 08:03 am, John MacDonald wrote:

> Not positive - I've seen rejections from all
> of them in the maillog.  Other than that
> I have no clue how to test them. BTW,
> they are spamcop, spamhaus, and orbl.

All blocklists suffer DOS attacks from time-to-time; we've often had to 
temporarily disable blocklists when they cause server backups.

> >>  Have you
> >>  tried manually testing the blocklists to see
> >>  if they're putting a load
> >>  on your server?
>
> No, how would I do this?

Reading one of the blocklists sites will show you how to manually create 
a request.

For example, to check to see if 65.58.240.229 is on spamcop, you'd do 
this:

$ dig 229.240.58.65.bl.spamcop.net

and look for an ANSWER SECTION.

An ANSWER SECTION means the IP# is listed; a missing ANSWER SECTION 
means the IP# is _not_ listed, and a timeout shold be fairly 
self-evident.  In addition, dig returns the "Query time", which will 
give you an idea of how long it took to get the response.  Well below 
100 msec is usual and good.

Additionally, when using some blocklists, the value returned has 
meaning.

Jeff
-- 
Jeff Lasman, nobaloney.net, P. O. Box 52672, Riverside, CA  92517 US
Professional Internet Services & Support / Consulting / Colocation
Our blists address used on lists is for list email only
Phone +1 909 324-9706, or see: "http://www.nobaloney.net/contactus.html";