• KeyDog
  • KeyDog
  • Global Moderator
  • Offline
  • Registered: 2008-12-12
  • Posts: 1,693

Topic: DNS IP Blacklist -Query inps.de-DNSBL before user registers

I recently had a bot register on a forum that was listed on the inps.de-DNSBL (and not on stopforumspam). So I thought to increase chances of catching bad IPs it might be good idea to run checks though there aswell. For example

IP 

80.179.199.23

was listed and
the DNS query would be 23.199.179.80.dnsbl.inps.de

For test purposes they have

2.0.0.127.dnsbl.inps.de text = "127.0.0.2 is listed for testing purposes since 2008-07-15"

So now the question:
Can PunBB make the ip LHSBL readable and then send a DNS-query?

If you need to know anything else from the people running that blacklist let me know and I'll contact them again...

  • KeyDog
  • KeyDog
  • Global Moderator
  • Offline
  • Registered: 2008-12-12
  • Posts: 1,693

Re: DNS IP Blacklist -Query inps.de-DNSBL before user registers

Found this might be better supported; found at
http://blogspambl.com
after speaking to the admin at SEM (spam eating monkey)

DNS
To check the status of the IP 1.2.3.4, query the blacklist as:
4.3.2.1.list.blogspambl.com
If the IP is listed there will be an A record response with the IP 127.0.0.2 and a TXT record response with a link to the lookup page.


PHP
A few lines for PHP: 

$clientip = explode(".", $_SERVER["REMOTE_ADDR"]);
$revip = array_reverse($clientip);
$query = implode(".", $revip) . ".list.blogspambl.com";
$result = explode(".", gethostbyname($query));

if ($result[0] == 127) {
    // Blocked IP handling code goes here
    echo "Blocked!";
}