adionditsak / blacklist-check-unix-linux-utility

Blacklist check UNIX/Linux utility. I was just a bit tired of web interfaces.
MIT License
109 stars 49 forks source link

IP listed in hostkarma.junkemailfilter.com as it return a code like 127.0.0.x #11

Open Mar974 opened 2 years ago

Mar974 commented 2 years ago

Hello I got this issue :

hostkarma.junkemailfilter.com return a list of code as the documentations says : http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists

127.0.0.1 - whilelist - trusted nonspam
127.0.0.2 - blacklist - block spam
127.0.0.3 - yellowlist - mix of spam and nonspam
127.0.0.4 - brownlist - all spam - but not yet enough to blacklist
127.0.0.5 - NOBL - This IP is not a spam only source and no blacklists need to be tested 

So when the script found that there is a DNS record it say that the IP is blacklisted even if it's a code like 127.0.0.1

Exemple : 22-09-19Sep:09:1663567873+0400 15.153.124.94.hostkarma.junkemailfilter.com.[blacklisted] (127.0.0.5 127.0.1.1)

but the record say 127.0.0.5 who mean NOBL.

Thanks.

bjlockie commented 1 year ago

dbl.spamhaus.org [blacklisted] (127.0.1.255) spamsources.fabel.dk [blacklisted] (127.0.0.2)

I wonder if they are standard return codes that all blacklist sites use.

Mar974 commented 1 year ago

I think every blacklist use a different list of return codes : https://www.spamhaus.org/faq/section/DNSBL%20Usage#200 https://docs.abusix.com/abusix-mail-intelligence/gbG8EcJ3x3fSUv8cMZLiwA/return-codes/2xXiqdjXxV5BhLu8kfCpKr

I dont think these are standards