[Httpbl-beta] Diagnostics page blank; lookups not corresponding to incoming http client addresses

[James B. <jmb...@ha...>]

Having removed the

    HTTPBLTestingURL        /httpbl_testing/

per bug #1711506, I'm finding that /httpbl_diagnostics/ always produces an
empty page, so I've not been able to run the tests mentioned by Jesse and
others. Is there another way to check the basic functionality of the mod?

[1] The log dir is writable, but I've not seen anything put there yet
[2] The repos directory is writable, and so far I've seen only a single
    file httpbl_diagnostics_test.txt dropped there
[3] "Resolve and reach the RBL domain"? I can see entries in my BIND
    query log, and can look up the test addresses by hand, which I
    imagine is what this means.


If this is concealing a local config error, perhaps that might be related
to do with the following anomaly:  So far, I've only seen httpBL DNS lookups
for two IP addresses - one of them around 4200 times and the other only once,
since installation on 2007-05-02.

Here's an example from a few minutes ago where I used a remote machine on
80.237.210.109 to access my server:

80.237.210.109 - - [15/May/2007:16:31:46 +0100] "GET / HTTP/1.0" 200 4154 "-"
    "Lynx/2.8.4rel.1 libwww-FM/2.14 SSL-MM/1.4.1 OpenSSL/0.9.6c"

but the corresponding entry in named.querylog is

15-May-2007 16:31:46.757 client 127.0.0.1#50330: query:
    (my ID).235.1.194.62.dnsbl.httpbl.org IN A +

The address 62.192.1.235 doesn't appear in any other apache log files, and
seems entirely spurious. The other address is a known client of a web service
I run, with a large number of accesses per day, none of which correspond to
the single BIND log entry:

02-May-2007 23:50:06.118 client 127.0.0.1#34863: query:
    (my ID.240.1.21.167.dnsbl.httpbl.org IN A +

I did however only enable my querylog after first installing http:BL, so
there may be some early requests that have been cached and not repeated.

I wonder if anyone here has performed any similar correlation test on their
web server and DNS lookup logs?

Fedora Core 6:
* kernel-2.6.20-1.2933.fc6
* httpd-2.2.4-2.fc6
* bind-9.3.4-3.fc6

-jmb
-- 
James Beckett <jmb...@ha...>
F601 C085 1482 B92A C812  556C A985 1497 209B 4E65