Hi Dave,
Unless that name server is listed in one of the RBLs already, you'd have to
set up your own RBL zone on your name server and then check against that.
Here's the appropriate section of the config file:
<!--Enables the checking of the URI's name servers against an RBL. -->
<!--If the name servers are listed in the RBL the defined weight will be
added-->
<!--Max_Name_servers_To_Check - Sets the number of name servers to
check. -->
<!--If set to zero all name servers returned from the DNS query will be
checked-->
<!--Bitmask_Skip_Options_Name_Server_RBLx - Bitmask value that allows
you to skip -->
<!--the associated Namerserver check if the URI is listed in the URI
list. -->
<!--Values: 0 - no skipping will occur. 1 - Skip Nameserver check if URI
was listed-->
<!--in a URI list. 2 - Skip if the URI's name server was already found
in he given -->
<!--blacklist. This prevents double scoring. 4 - Skip scoring if the
URI's name server -->
<!--was listed on any of the previous lists. Skip values are added
together based -->
<!--on the options you want.-->
<add key="Enable_URI_Name_Server_Check" value="true" />
<add key="Max_Name_Servers_To_Check" value="3" />
<add key="Name_Server_RBL1" value="sbl.spamhaus.org" />
<add key="Bitmask_Skip_Options_Name_Server_RBL1" value="2" />
<add key="Name_Server_Return_Code_RBL1" value="*" />
<add key="Name_Server_Weight_RBL1" value="2" />
-----Original Message-----
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Dave
Beckstrom
Sent: Thursday, July 01, 2010 5:31 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Blocking domains by DNS server?
There is a pervasive spammer out there, where the common denominator in the
jerk's spam is the fact that all of the domains in the body of the email are
served by DNS servers NS1.domainsite.com - NS4.domainsite.com.
I want to block all email where a link in the body is resolved by one of
those DNS servers. I haven't looked at my invURIBL config for some time,
but isn't that one of the things that it can do? If so, how do I set that
up? Otherwise, is there another way to achieve the above?
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
