buiの雑記帳:buimemo

spamAssassin/spampd DNSBL blocked

spampd[49858]: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, 
creating /somewhere/spampd/.spamassassin/dnsblock_bl.score.senderscore.com
(This means DNSBL blocked you due to too many queries.
Set all affected rules score to 0, or use
"dns_query_restriction deny bl.score.senderscore.com" to disable queries)

• 原因（この環境での）
  • unboundのforwardにより上位キャッシュサーバーに転送される
  • その転送先からDNSBLへのアクセスが他サイトからも集まり、多く発生したため
• 対策
  • unboundのstabによりDNSBLの問い合わせ先をDNSBLのNSに転送する
  • 探し方例 : drill -T list.dnswl.org

stub-zone:
    name: "senderscore.com"
    stub-host: ns-899.awsdns-48.net
    stub-host: ns-239.awsdns-29.com
    stub-host: ns-1264.awsdns-30.org
    stub-host: ns-1817.awsdns-35.co.uk

stub-zone:
    name: "list.dnswl.org"
    stub-host: a.ns.dnswl.org
    stub-host: b.ns.dnswl.org
    stub-host: c.ns.dnswl.org
    stub-host: d.ns.dnswl.org
    stub-host: e.ns.dnswl.org

stub-zone:
    name: "multi.uribl.com"
    stub-host: aa.uribl.com.
    stub-host: bb.uribl.com.
    stub-host: cc.uribl.com.
    stub-host: dd.uribl.com.
    stub-host: ee.uribl.com.
    stub-host: ff.uribl.com.
    stub-host: gg.uribl.com.
    stub-host: hh.uribl.com.

stub-zone:
    name: "habeas.com"
    stub-host: ns-899.awsdns-48.net.
    stub-host: ns-218.awsdns-27.com.
    stub-host: ns-988.awsdns-59.net.
    stub-host: ns-1030.awsdns-00.org.
    stub-host: ns-1681.awsdns-18.co.uk.

stub-zone:
    name: "bondedsender.org"
    stub-host: ns-1626.awsdns-11.co.uk.
    stub-host: ns-892.awsdns-47.net.
    stub-host: ns-196.awsdns-24.com.
    stub-host: ns-1093.awsdns-08.org.