Currently testing in the Testlab (03-09-2008)

Warning: date() [function.date]: It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /home/hemmi3/public_html/blog/inc/items/model/_itemquery.class.php on line 628

Warning: date() [function.date]: It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /home/hemmi3/public_html/blog/inc/items/model/_itemquery.class.php on line 628

Currently I'm testing the DNSBL Antispam plugin. The plugin uses one or more lists to block bots. The test is to see what lists are suitable for this job.
DNS Blacklists are as old as spam I suppose. Well known is the ORDB Open Relay Database. These are used to filter spam emails. The DNS of the sender is checked and the mail is usually tagged as spam before it's passed to the recipient.
These lists are used to trap bots on this blog. I was asked by Spuyt 12 of Geen Commentaar who's site is often blocked in a DDos style attack.

So I'm using the plugin by blueyed and try some lists and combination of lists. If the plugin thinks you're a skiddie you're presented with a Captcha and you can enter or leave. Happened even to me If you validate the Captcha test you are whitelisted. The trick is finding the right (combination of) list(s) that block only few 'real' visitors.

Currently I have these three lists active:
- list.dsbl.org
- sbl-xbl.spamhaus.org
- relays.ordb.org

and I'm not happy since it doesn't pass enough visitors:
Blocked requests: 67 (11%)
Whitelisted requests: 531 (89%)
Not blocked requests: 0 (0%)

The whitelisted people are probably blocked in the past. Please leave a reply to this post if you are a victim.

Before you jump into this fun, there is a show stopping bug in the plugin. Change lines 603-605 into:

	global $Plugins, $inc_path, $io_charset;

require_once $inc_path . '_core/ui/forms/_form.class.php';

Furthermore the default lists in the Plugin settings are concatenated wrong: list.dsbl.org\nsbl-xbl.spamhaus.org. Make that list.dsbl.org sbl-xbl.spamhaus.org with a space in between in stead of \n. If you are there don't forget to turn on Statistics (see Tools -> DNSBL).

Some lists to check:
- relays.ordb.org
- list.dsbl.org
- dnsbl.njabl.org
- sbl-xbl.spamhouse.org
- bl.spamcop.net
- sbx.spamcracker.org

Please accept my apologies for having to do the Captcha once in a while. It's for a good cause.

Bye for now

== UPDATE ==
I found a more comprehensive list at Openrbl DNSBL RBL Blacklist Lookup that also checks an IP against all lists. I'm red (blacklisted) on three but also whitelisted on two. I think the lists(s) I'm looking for will be there. I'm still posting results in the comments. Those are by no means statitically proven data, but if there are zero blacklists or zero positive passes I think the list is useless and that's the point where I break the test.

Warning: mktime() [function.mktime]: It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /home/hemmi3/public_html/blog/inc/_core/_misc.funcs.php on line 870

Warning: date() [function.date]: It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /home/hemmi3/public_html/blog/inc/_core/_misc.funcs.php on line 981

Warning: date() [function.date]: It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /home/hemmi3/public_html/blog/inc/_core/_misc.funcs.php on line 986

Warning: date() [function.date]: It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /home/hemmi3/public_html/blog/inc/_core/_misc.funcs.php on line 986

Warning: date() [function.date]: It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /home/hemmi3/public_html/blog/inc/_core/_misc.funcs.php on line 987

Warning: date() [function.date]: It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /home/hemmi3/public_html/blog/inc/_core/_misc.funcs.php on line 988
This entry was posted on September 3rd, 2008
Warning: mktime() [function.mktime]: It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /home/hemmi3/public_html/blog/inc/_core/_misc.funcs.php on line 870

Warning: date() [function.date]: It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Los_Angeles' for 'PDT/-7.0/DST' instead in /home/hemmi3/public_html/blog/inc/_core/_misc.funcs.php on line 981
at 01:31:40 am and is filed under Main category.

Trackback address for this post

4 comments

Comment from: admin [Member]

relays.ordb.org

Blocked requests:
72 (7%)

Whitelisted requests:
995 (93%)

Not blocked requests:
0 (0%)

The above statistics are from 03-09-08 02:03:29 to 03-09-08 02:03:42.

Comment from: admin [Member]

list.dsbl.org

Blocked requests:

0 (0%)

Whitelisted requests:

51 (26%)

Not blocked requests:

144 (74%)

The above statistics are from 03-09-08 03:08:30 to 03-09-08 03:22:20

Comment from: admin [Member]

sbl-xbl.spamhouse.org

Blocked requests:

46 (7%)

Whitelisted requests:

595 (93%)

Not blocked requests:

0 (0%)

The above statistics are from 03-09-08 03:28:00 to 03-09-08 03:32:49.

Comment from: admin [Member]

dnsbl.njabl.org

Blocked requests:

0 (0%)

Whitelisted requests:

1522 (94%)

Not blocked requests:

94 (6%)

The above statistics are from 03-09-08 04:02:12 to 03-09-08 05:08:57.

Comment feed for this post

Testlab B2evo 3.0 alpha