[Rspamd-Users] DNS requests 1.0.0.127.bl.*

[Michael J. Tubby B.Sc. MIET]

Michael,

Off list ... are you seeing queries for 127.0.0.1 or answers with 127.0.0.1?

Real-time Block Lists (RBL) mostly use DNS with name to number mapping 
there the results are 127.0.0.xx where xx is 1 through some higher 
number depending on the RBL which indicates which list the sending host 
or domain was found in.

If your queries are for domain names, hosts or IP addresses and your 
answers are 127.0.0.1, 127.0.0.2, etc. then this is normal for RBL lookups.


Mike



On 10/12/2020 18:28, Michael Ströder via Users wrote:
> HI!
>
> I've installed rspamd 2.6 recently and I really like the results. :-)
>
> Watching at the log of a local unbound resolver I'm seeing DNS requests
> to the various block-lists for IP address 127.0.0.1 which obviously does
> not make sense (NXDOMAIN).
>
> Is this only caused by spam content or is there a typical
> misconfiguration at my side?
>
> I'm considering to simply add override RRs in unbound to save some
> resources. Does that make sense?
>
> Ciao, Michael.

-- 

Thorcom Systems logo <https://thorcom.uk>

Michael J Tubby B.Sc. (Hons) MIET/ Technical Director
Email: mike.tubby at thorcom.co.uk <mailto:mike.tubby at thorcom.co.uk>
Direct: +44 (0)1905 752892 <tel:+441905752892>
Mobile: +44 (0)7973 225144 <tel:+447973225144>

Thorcom Systems Limited
Office: +44 (0)1905 756 700 <tel:+441905756700>
Unit 4, 96B Blackpole Trading Estate West, Worcester, WR3 8TJ, England, UK
Registered in England & Wales 02704696 / VAT Number GB487925681
<tel:+441905756700>

<tel:+441905756700>

<tel:+441905756700>Twitter <https://twitter.com/thorcomsystems> Facebook 
<https://www.facebook.com/thorcomsystems/> LinkedIn 
<https://uk.linkedin.com/company/332271>

This email and any attachments to it may be confidential or legally 
privileged and are intended solely the individual to whom it is addressed.
If you are not the intended recipient of this email, you must not take 
any action based upon its contents or disclose its contents to any 
third-party.
This email footer is intended to identify the sender and does not 
constitute a signature or agreement to enter into any form of legally 
binding contract.
While the author has taken reasonable care in the preparation of this 
email Errors and Omissions Excepted (E&OE).
Any views or opinions expressed are those of the author and do not 
necessarily represent those of Thorcom Systems Limited.
Please contact the sender if you believe you have received this email in 
error.