David Ritz wrote:
 
> > So it's not clear if it would have been listed by the CBL at the
> > time it hit my server.  We know that it's not listed at spamhaus
> > - even now.
> 
> Very little is clear to you.
> 
> The only way you can determine whether a sending IP is listed in any
> DNSbl, when you first see it, is to check the DNSbl, when the
> connection occurs. 

There is one other way - if the DNSbl web portal would give the
date/time of first appearance (not just the last time it was detected).

> It's your choice not to do so, but don't go jumping to conclusions
> based on your assumptions.  These seem to lead you to err.

I said it wasn't clear, based on what the DNSbl was reporting through
it's web interface, if it would have flagged the IP at the time it hit
my server.  That is a factual statement.

> So far as your assertion, "We know that it's not listed at spamhaus
> - even now," you've already shown that 209.206.237.36 is listed in
> the Spamhaus XBL zone.  It's on the XBL, because it's listed at
> cbl.abuseat.org.  Seriously, WTF is your major malfunction?

Does spamhaus operate the other DNSbl's that comprise the XBL zone?

Would a spamhaus query return only what spamhaus knows about an ip, or
(if it knows nothing) would spamhaus return an XBL result (if one
exists) ?

> The CBL only shows when an IP address was last seen, ±30 minutes.

Would it kill it to also show when it was first detected?
--- NewsGate v1.0 gamma 2