Blacklisted on Yet another DNSBL blacklist is gone.

Written by - 2 comments

Published on - Listed in Mail Internet Monitoring

Yesterday all of a sudden I got many blacklist alerts for all my servers with a public IP address:

***** Service Monitoring on icinga2 *****
Info:    CHECK_RBL WARNING - BLACKLISTED on 1 server of 95 (

It's very unlikely that all servers are blacklisted at the same time. And as it already happened in the past (see Disable AHBL (Abuse Hosts) DNS blacklist in Spamassassin), a disabled DNSBL probably the cause.

And indeed, checking the whois of the domain reveals that the domain has expired on May 30 2019:

$ whois
Registry Domain ID: D98199203-LROR
Registrar WHOIS Server:
Registrar URL:
Updated Date: 2019-05-30T02:52:25Z
Creation Date: 2003-05-26T19:20:39Z
Registry Expiry Date: 2020-05-26T19:20:39Z
Registrar Registration Expiration Date:
Registrar: Tucows Inc.
Registrar IANA ID: 69

In a browser, the appearing website is self explanatory as well:

Spamcannibal DNSBL RIP

As I'm using the check_rbl monitoring plugin, the blacklist can simply be removed or commented in the ini file containing all the blacklists.

# grep spamcannibal /usr/lib/nagios/plugins/rbl.ini
# sed -i "/spamcannibal/s/server/#server/" /usr/lib/nagios/plugins/rbl.ini
# grep spamcannibal /usr/lib/nagios/plugins/rbl.ini

The plugin now returns OK again.

Add a comment

Show form to leave a comment

Comments (newest first)

Claudio Kuenzler from Switzerland wrote on May 31st, 2019:

Draugas, check out the list of the check_rbl plugin:

Draugas from wrote on May 31st, 2019:

Can you share DNSBL list?