There are several bad rblservers in rblcheck-dns. I have personally contacted formmail.relays.monkeys.com and proxies.relays.monkeys.com, who wish to be unlisted, and they mark every address as spam. I also suspect the following should be removed: block.blars.org, blacklist.spambag.org, okrelays.nthelp.com, and relays.nthelp.com Reproducible: Always Steps to Reproduce: 1. /usr/lib64/nagios/plugins/contrib/rblcheck-dns -H 8.8.8.8 Actual Results: You will see google's dns server listed. You can try any IP. Expected Results: Should not be listed As administrators retire their rblservers, and try to ween users from consuming their bandwidth, by reporting every address from 0.0.0.0 to 255.255.255.255 as ``blacklisted'. These servers clearly must be de-listed.
Created attachment 323120 [details, diff] Removed bad enteries from rblservers Attached fix for rblcheck-dns
I have applied this patch locally, but I'm just adding support for check_rbl from bug #433080 and will probably remove rblcheck-dns since it seems to me like it's almost completely broken by design.
Created attachment 368708 [details, diff] Patch to remove the rblcheck plugins Here's a quick patch to remove the rblchec-* scripts. If you'd like an RBL plugin that works, try net-analyzer/nagios-check_rbl.
This plugin is gone entirely from new versions of nagios-plugins. Realistically the old 1.4.x series ain't gonna get fixed. I'm going to concentrate on fixing bugs in the 2.x series and stabilize it as soon as I'm confident that it has fewer bugs than 1.4.x.
