Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm trying to setup my own custom dnsbl server for blocking spam. I have successfully created a server running rbldnsd but am curious about what DNS records I would need to have in place so that my content filter can locate and communicate with the dnsbl...

For example, lets say that my dnsbl server has an ip of 123.123.123.123 and I want my content filter to be able to specify the dnsbl server as server.dnsbl.foo.com

Would I need to have an NS record pointing dnsbl.foo.com to the blocklist server? Or would I just need an A record in the foo.com zone pointing server.dnsbl.foo.com to 123.123.123.123?

Lastly, are there any RFCs for dnsbls? I'd like to understand the play-by-play for how content filters are supposed to request this type of information.

Thanks!

share|improve this question

2 Answers 2

up vote 1 down vote accepted

The closest thing to a "standard" for DNS blacklists is RFC 5782.

You will indeed need NS records to point the sub-domain of your blacklist server at the dnsbl server. Note that those NS records will have to point to the hostname of that server, and of course that hostname will need A records pointing to the actual IP address.

share|improve this answer

From a DNS perspective a dnsbl server is just like any other DNS zone, and DNSBL lookups operate by your mail server making a DNS lookup in a specified zone. If you want to delegate your DNSBL zone (e.g. to the server running rbldnsd) you need NS records pointing to the server you're delegating to.

Re: a DNSBL play-by-play, there are probably RFCs on the subject but I can't think of any off the top of my head. http://en.wikipedia.org/wiki/DNSBL is probably a good starting point if you're looking to understand how DNS blackhole lists are supposed to work.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.