<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="Generator" content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
        {font-family:Helvetica;
        panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
        {font-family:Wingdings;
        panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p
        {mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
        {mso-style-priority:99;
        mso-style-link:"Balloon Text Char";
        margin:0in;
        margin-bottom:.0001pt;
        font-size:8.0pt;
        font-family:"Tahoma","sans-serif";}
span.EmailStyle18
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.BalloonTextChar
        {mso-style-name:"Balloon Text Char";
        mso-style-priority:99;
        mso-style-link:"Balloon Text";
        font-family:"Tahoma","sans-serif";}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style></head><body lang="EN-US" link="blue" vlink="purple"><div class="WordSection1"><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Daniel,</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">To expand on Tim’s Reply.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Have a look at </span><a href="http://www.barracudacentral.org/rbl/how-to-use">http://www.barracudacentral.org/rbl/how-to-use</a> for an example of how DNSBL’s work.</p>
<p class="MsoNormal"> </p><p class="MsoNormal">There’s a list of around 80 or so I’ve found in random locations, and you can do simple DNS lookups based on the above URL’s methods to get the information. Otherwise, I would recommend looking at MXToolbox as an alternative which is already configured <span style="font-family:Wingdings">J</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p><div><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal">
<b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> AusNOG [mailto:<a href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b>Tim G<br>
<b>Sent:</b> Wednesday, October 16, 2013 9:58 AM<br><b>To:</b> Daniel Watson; <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br><b>Subject:</b> Re: [AusNOG] Viewing RBL's on entire /24</span></p>
</div></div><p class="MsoNormal"> </p><div id="bloop_customfont"><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Helvetica","sans-serif"">The quickest way would be just to write a quick script that loops through the dns servers for the RBL's that you want to check against for each IP address and marks the IP with wether or not the IP was found in a block list :)</span></p>
</div><div id="bloop_customfont"><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Helvetica","sans-serif""> </span></p></div><div id="bloop_customfont"><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Helvetica","sans-serif"">If you want to pay some money, contact MxToolBox. They have a fantastic API if you own a /24 that allows you to query each IP address, and they do all the DNS work for you. They also send you email reports daily showing what IPs are blocked etc.</span></p>
</div><div id="bloop_customfont"><p class="MsoNormal"> </p></div><div id="bloop_customfont"><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Helvetica","sans-serif"">Regards,</span></p></div>
<div id="bloop_customfont"><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Helvetica","sans-serif"">Tim</span></p></div><p class="MsoNormal"> </p><p><span style="color:#a0a0a8">On 16 October 2013 at 9:48:29 AM, Daniel Watson (<a href="mailto://daniel@glovine.com.au">daniel@glovine.com.au</a>) wrote:</span></p>
<blockquote style="margin-left:0in;margin-top:5.0pt;margin-bottom:5.0pt"><div><div><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">I was wondering if anybody might be able to recommend a way for me to do a RBL lookup on an entire /24 rather then looking up each IP separately</span></p>
</div><p class="MsoNormal"> </p></div></blockquote></div></body></html>