[121133] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: SORBS on autopilot?

daemon@ATHENA.MIT.EDU (Jon Lewis)
Mon Jan 11 11:12:31 2010

Date: Mon, 11 Jan 2010 11:11:41 -0500 (EST)
From: Jon Lewis <jlewis@lewis.org>
To: Ken Chase <math@sizone.org>
In-Reply-To: <20100111154759.GK6617@sizone.org>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On Mon, 11 Jan 2010, Ken Chase wrote:

> Anyone got some pointers on how to get off SORBS' Dynamic IP lists?
>
> We've followed their RFC proposed static reverse DNS assignment naming 
> and all elements of their FAQ.

Have you tried all 3 of the routes listed at 
http://www.au.sorbs.net/faq/dul.shtml ?

Something they don't tell you on the web page is that they ignore TTL and 
cache your DNS for a relatively long time.  If you tried for automated 
removal and your rDNS wasn't SORBS-compliant, automated removal isn't 
going to work for some number of days (I forget how many) even after you 
have made your rDNS SORBS-compliant.

67.196.137.160  H160.C137.B196.A67.tor.colo.heavycomputing.ca.
67.196.137.161  H161.C137.B196.A67.tor.colo.heavycomputing.ca.
67.196.137.162  H162.C137.B196.A67.tor.colo.heavycomputing.ca.
67.196.137.163  sizone.org.
67.196.137.164  H164.C137.B196.A67.tor.colo.heavycomputing.ca.
67.196.137.165  H165.C137.B196.A67.tor.colo.heavycomputing.ca.
67.196.137.166  H166.C137.B196.A67.tor.colo.heavycomputing.ca.

With rDNS like that...good luck.  Go read

http://tools.ietf.org/id/draft-msullivan-dnsop-generic-naming-schemes-00.txt

change your rDNS, wait a few days, and maybe you'll have a chance.

----------------------------------------------------------------------
  Jon Lewis                   |  I route
  Senior Network Engineer     |  therefore you are
  Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________


home help back first fref pref prev next nref lref last post