Release Notes – DNSBL 5.0.2

It has been alive for a while, but since we’re starting on v5.0.3 today, here’s also the official release notes for DNSBL 5.0.2

Release Notes – Tornevall Networks DNSBL Project – Version EP-DNSBL-5.0.2

Bugs

  • [DNSBL-27] – When extended information is active and deleted items are shown
  • [DNSBL-47] – Undefined indexes in curl removal tests
  • [DNSBL-51] – API removal allows multiple removals on delisted address and adds penalty if more than one request is sent

Task

  • [DNSBL-26] – Removal tool via http
  • [DNSBL-30] – Permanent deletion of local addresses
  • [DNSBL-32] – Need navbar for DNSBL-web
  • [DNSBL-36] – Removal penalties for returning hosts
  • [DNSBL-37] – Penalty timer reset after 180 days
  • [DNSBL-38] – Penalty timer should show up on delisting-homepage
  • [DNSBL-39] – Release of PenaltyBL
  • [DNSBL-44] – Purge host instead of delist in API

DNSBL with FraudBL

dnsbl.tornevall.org v5.0.0 has just been released so we are now fully synched with FraudBL. The docs regarding the API has been updated, which you can read here: http://docs.tornevall.net/x/EYBu.

There is an ongoing project with TorneLIB which has a standalone project for handling our API. It’s not ready for release, but you can review the upcoming script at the dev-site here!

If you recently contacted us about removal and you seem to be relisted, the release of version 5 may be the cause, and the fact that some hosts has not been properly updated in both our databases.

dnsbl@tornevall.org

FraudBL is active

FraudBL is, since june 22, an active resolver. Tornevall Networks has in active for tests and currently we’ve seen a positive result of the activation. More information about bitmasking will in short get updated at http://docs.tornevall.net/x/AoA_/. In short, we will also activate the new default database for dnsbl.tornevall.org.

You can still contact dnsbl@tornevall.org for blacklisting support.

FraudBL status update.

FraudBL is currently up and running and while we are typing this post, we are collecting spam from ”phishing sites”. As we are counting, approximately 1200 hosts are flagged ”phishing” in our database. In short, this database will get a zone update so we can start using it. What we are actually waiting for is dnsbl.tornevall.org and the last migration steps.

Source.

Tornevall Networks primary link down

Our primary network link went down yesterday. It has been reported, but it seems like it will take a little bit longer to fix this time. However, we’re not completely down, since we switched over to our backup route while we are waiting.

opm.tornevall.org with DNSBL status

For three years ago (june 2013) we decided to remove the substructure opm.tornevall.org, from the DNSBL. Statistics, however, shows that opm are still in use. And in fact traffic seems to increase, from those resolvers. They are therefore reinstated, even if there will be double entries of each blacklisted host.

Our honeypot have also begun to catch e-mail on a new level. Messages containing traces of phishing and fraud will be flagged differently from the regular lookups. This refactoring and migrating to the new system are not finished yet, so bit-flags are not considered yet. However, our new domain for phishing – FraudBL – may be useful here.

And do not forget: As long as the migration is not finished, we will continue remove your blacklisted hosts manually, with as high SLA as possible. In that case, we still use the support address dnsbl@tornevall.org

To be continued…