View Single Post
  #6   (View Single Post)  
Old 14th January 2013
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,128
Default

Quote:
2013-01-14_16:21:09_UTC 158.86.194.82.bl.csma.biz. 208.91.197.19
What this ip means?
I have no idea, you should asks the folks at csma.biz. It seems the domain is for sale

Quote:
158.86.194.82.spam.dnsbl.sorbs.net. 127.0.0.6
As mentioned before any answer to the DNS query indicates that the address is listed. These answers usually use addresses from the 127.0.0.0/8 subnet.

If you do a query for the TXT record you can see the reason:
Code:
$ dig +short -t txt 158.86.194.82.spam.dnsbl.sorbs.net. 
"Spam Received See: http://www.sorbs.net/lookup.shtml?82.194.86.158"
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump

Last edited by J65nko; 14th January 2013 at 10:53 PM. Reason: clarification
Reply With Quote