Am 13.05.2015 um 18:53 schrieb Reindl Harald:
Am 13.05.2015 um 18:17 schrieb Chris:
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by
resolvconf(8)
#     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 127.0.0.1


nameserver 127.0.0.1
search PK5001Z

as already suggested days ago REMOVE "search PK5001Z" because that may
end for unqualified queries (missing trailing dot) to first ask
"whatever.PK5001Z" and if they make it to RBL's the reaction likely is
refuse further queries because a broken resolver detcted

and BTW consider using unbound instead of bind for a caching-only server

finally if just some random queries are failing don't bother, the RBLs are a cluster of servers and it happens multiple times each week that barracuda auth servers saying "b.barracudacentral.org" NXDOMAIN because errors there

if you would make a drama for each failing DNS query on a heavy used network you would have a lot to cry - as long as you are not using a forwarder there is not much reason to worry, except your IP itself is on a sorbs blacklist and hence refused - maybe your MX is listed as DUL which is no problem if it is only incoming mail and not intended for sending but a valid reason to reject rbl queries by the policy of the rbl owner



Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to