[Pkg-nagios-devel] Bug#929869: nagios-plugins-contrib: check_rbl.ini - please remove bl.spamcannibal.org
John Lines
john+reportbug-juno at paladyn.org
Sun Jun 2 08:06:37 BST 2019
Package: nagios-plugins-contrib
Version: 24.20190301
Severity: normal
Dear Maintainer,
(see https://www.theregister.co.uk/2018/05/30/spamcannibal_hijack/ )
Information from https://www.dnsbl.info/bl-spamcannibal-org.php - but
this is more dynamic than The Register, so might not always show this:
On 5/30/2018 the domain for SPAMCANNIBAL.ORG lapsed or was compromised and is now blacklisting the entire internet.
If you are an end user and your mail has been returned as undeliverable...
and the bounce notification references bl.spamcannibal.org you'll need to contact the intended recipient by phone or other means and ask them to contact their email provider to remove all references to bl.spamcannibal.org.
If you are an end user and you visited a blacklist monitoring website...
and you've seen that your IP address is listed please let the blacklist monitoring website know that bl.spamcannibal.org is no longer active and needs to be removed. Since the vast majority of mail admins don't consult this list it should have no impact your mail delivery.
If you are a blacklist monitoring organization...
please cease checking against bl.spamcannibal.org.
If you are a mail server administrator...
and your mail server is rejecting or flagging mail as spam because of bl.spamcannibal.org please remove bl.spamcannibal.org from your list of checks. In the future you'll want to make sure that you periodically check the operational status of all blacklists that you consult.
The Register article contains the additional information that the domain
will not return as a useful source of blacklists even if the current
issue is fixed, and so it should be removed from
/etc/nagios-plugins/check_rbl.ini
-- System Information:
Debian Release: 10.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: armel (armv5tel)
Kernel: Linux 4.19.0-5-marvell
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
nagios-plugins-contrib depends on no packages.
Versions of packages nagios-plugins-contrib recommends:
ii bind9-host 1:9.11.5.P4+dfsg-5
pn binutils <none>
ii curl 7.64.0-3
pn debsecan <none>
ii file 1:5.35-4
pn freeipmi-tools <none>
ii libc6 2.28-10
ii libdata-validate-domain-perl 0.10-1
ii libdata-validate-ip-perl 0.27-1
ii libdate-manip-perl 6.76-1
ii libdbd-mysql-perl 4.050-2
ii libio-socket-ssl-perl 2.060-3
pn libipc-run-perl <none>
ii liblocale-gettext-perl 1.07-3+b4
pn liblwp-useragent-determined-perl <none>
pn libmail-imapclient-perl <none>
pn libmemcached11 <none>
pn libmemcachedutil2 <none>
ii libmonitoring-plugin-perl 0.40-1
pn libnet-cups-perl <none>
ii libnet-dns-perl 1.19-1
ii libnet-dns-sec-perl 1.11-1
ii libnet-smtp-ssl-perl 1.04-1
pn libnet-smtp-tls-perl <none>
pn libnet-smtpauth-perl <none>
pn libnet-snmp-perl <none>
ii libnet-ssleay-perl 1.85-2+b1
ii libreadonly-perl 2.050-1
pn libredis-perl <none>
pn libsocket-perl <none>
ii libtimedate-perl 2.3000-2
pn libvarnishapi2 <none>
pn libwebinject-perl <none>
pn libxml-simple-perl <none>
pn libyaml-syck-perl <none>
ii lsof 4.91+dfsg-1
ii monitoring-plugins-basic [nagios-plugins-basic] 2.2-6
ii openssl 1.1.1b-2
ii perl 5.28.1-6
ii python 2.7.16-1
pn python-pymongo <none>
ii ruby 1:2.5.1
pn snmp <none>
ii whois 5.4.2
Versions of packages nagios-plugins-contrib suggests:
pn backuppc <none>
pn cciss-vol-status <none>
pn expect <none>
pn libsys-virt-perl <none>
pn moreutils <none>
pn mpt-status <none>
pn nagios-plugin-check-multi <none>
pn percona-toolkit <none>
pn perl-doc <none>
ii python2.7 2.7.16-2
pn smstools <none>
-- Configuration Files:
/etc/nagios-plugins/check_rbl.ini changed:
[rbl]
server=cbl.abuseat.org
server=bl.deadbeef.com
server=spamtrap.drbl.drand.net
server=spamsources.fabel.dk
server=0spam.fusionzero.com
server=mail-abuse.blacklist.jippg.org
server=korea.services.net
server=spamguard.leadmon.net
server=ix.dnsbl.manitu.net
server=relays.nether.net
server=psbl.surriel.com
server=dyna.spamrats.com
server=noptr.spamrats.com
server=spam.spamrats.com
server=dnsbl.sorbs.net
server=spam.dnsbl.sorbs.net
server=bl.spamcop.net
server=pbl.spamhaus.org
server=sbl.spamhaus.org
server=xbl.spamhaus.org
server=ubl.unsubscore.com
server=dnsbl-1.uceprotect.net
server=dnsbl-2.uceprotect.net
server=dnsbl-3.uceprotect.net
server=db.wpbl.info
server=access.redhawk.org
server=blacklist.sci.kun.nl
server=dnsbl.kempt.net
server=forbidden.icm.edu.pl
server=hil.habeas.com
server=rbl.schulte.org
server=sbl-xbl.spamhaus.org
server=bl.technovision.dk
server=b.barracudacentral.org
server=dnsbl.antispam.or.id
server=dnsbl.inps.de
server=drone.abuse.ch
server=dsn.rfc-ignorant.org
server=dul.dnsbl.sorbs.net
server=http.dnsbl.sorbs.net
server=l1.spews.dnsbl.sorbs.net
server=l2.spews.dnsbl.sorbs.net
server=misc.dnsbl.sorbs.net
server=postmaster.rfc-ignorant.org
server=rbl.spamlab.com
server=rbl.suresupport.com
server=relays.bl.kunden.de
server=smtp.dnsbl.sorbs.net
server=socks.dnsbl.sorbs.net
server=spam.abuse.ch
server=spamrbl.imp.ch
server=tr.countries.nerd.dk
server=unsure.nether.net
server=virbl.bit.nl
server=web.dnsbl.sorbs.net
server=whois.rfc-ignorant.org
server=wormrbl.imp.ch
server=zen.spamhaus.org
server=zombie.dnsbl.sorbs.net
server=blackholes.five-ten-sg.com
server=blacklist.woody.ch
server=bl.emailbasura.org
server=bogons.cymru.com
server=combined.abuse.ch
server=duinv.aupads.org
server=dynip.rothen.com
server=ohps.dnsbl.net.au
server=omrs.dnsbl.net.au
server=orvedb.aupads.org
server=osps.dnsbl.net.au
server=osrs.dnsbl.net.au
server=owfs.dnsbl.net.au
server=owps.dnsbl.net.au
server=probes.dnsbl.net.au
server=proxy.bl.gweep.ca
server=proxy.block.transip.nl
server=rbl.inter.net
server=rbl.megarbl.net
server=rdts.dnsbl.net.au
server=relays.bl.gweep.ca
server=residential.block.transip.nl
server=ricn.dnsbl.net.au
server=rmst.dnsbl.net.au
server=spamlist.or.kr
server=t3direct.dnsbl.net.au
server=ubl.lashback.com
server=all.s5h.net
server=dnsbl.anticaptcha.net
server=dnsbl.dronebl.org
server=dnsbl.spfbl.net
server=ips.backscatterer.org
server=singular.ttk.pte.hu
server=spam.dnsbl.anonmails.de
server=spambot.bls.digibase.ca
server=z.mailspike.net
server=dul.dnsbl.borderware.com
server=uribl.swinog.ch
server=dnsbl.inps.de
server=tor.dan.me.uk
server=torexit.dan.me.uk
server=combined.rbl.msrbl.net
server=rbl.efnetrbl.org
server=virbl.dnsbl.bit.nl
server=relays.mail-abuse.org
server=dev.null.dk
server=blackholes.mail-abuse.org
server=dialups.mail-abuse.org
server=dul.orca.bc.ca
server=blackholes.five-ten-sg.com
server=rbl-plus.mail-abuse.org
server=rbl.jp
server=virus.rbl.jp
server=dialup.blacklist.jippg.org
server=blackholes.intersil.net
server=assholes.madscience.nl
server=blackholes.sandes.dk
server=blocked.hilli.dk
server=cart00ney.surriel.com
server=dnsbl.antispam.or.id
server=dsbl.dnsbl.net.au
server=duinv.aupads.org
server=rsbl.aupads.org
server=intruders.docs.uu.se
server=map.spam-rbl.com
server=orvedb.aupads.org
server=proxy.bl.gweep.ca
server=pss.spambusters.org.ar
server=rdts.dnsbl.net.au
server=relays.bl.gweep.ca
server=relays.bl.kundenserver.de
server=spam.olsentech.net
; these are rather slow
;server=bl.csma.biz
;server=sbl.csma.biz
;server=cdl.anti-spam.org.cn
;server=virus.rbl.jp
;server=short.rbl.jp
-- no debconf information
More information about the Pkg-nagios-devel
mailing list