Textpattern says that my IP is blacklisted even though it is not

tdn · 2006-10-18 15:00:41

Hi

I have just upgraded i the new version 4.0.4 yesterday.
I can’t write comments in my blog. I get this error:

your_ip_is_blacklisted_by sbl.spamhaus.org

Though my IP address is not blacklisted. I have even tried ssh’in to the webserver and tried posting from localhost. I get the same message. And of course localhost should not be blacklisted :)

Do you have any idea how to solve this?

ruud · 2006-10-18 16:50:49

When you’re logged in using SSH, try the following (assuming your IPnr is 1.2.3.4):
host 1.0.0.127.sbl.spamhaus.org
host 4.3.2.1.sbl.spamhaus.org

What does that give as a result?
What PHP version are you using?
Are you using a Windows, Linux or BSD webhost? (or something even more exotic)

Last edited by ruud (2006-10-18 16:54:09)

tdn · 2006-10-18 17:04:56

(~) host 250.103.91.83.sbl.spamhaus.org ; host 1.0.0.127.sbl.spamhaus.org
250.103.91.83.sbl.spamhaus.org does not exist, try again
1.0.0.127.sbl.spamhaus.org does not exist, try again

tdn · 2006-10-18 17:06:02

And I am using PHP Version 5.1.4-Debian-0.1~sarge1 (Debian GNU/Linux).

ruud · 2006-10-18 17:26:32

If you put the following in a new PHP file on your website, what does your browser show when you open the page? It should say: bool(false)

<?php var_dump(gethostbynamel('1.0.0.127.sbl.spamhaus.org')); ?>

PS. Debian Sarge with PHP5.1.4? Is that a backport or did you compile it yourself?

Last edited by ruud (2006-10-18 17:27:33)

ruud · 2006-10-18 17:47:57

Perhaps a temporary workaround until the real cause of this problem is found… try sbl.spamhaus.org:2 as the spam blacklist in the advanced preferences.

Last edited by ruud (2006-10-18 17:50:55)

tdn · 2006-10-18 17:53:18

<?php var_dump(gethostbynamel('1.0.0.127.sbl.spamhaus.org')); ?> gives:

array(1) { [0]=> string(14) "83.221.155.180" }

PHP5.1.4 is a backport. I use this source:

deb http://people.debian.org/~dexter php5.1 sarge
deb-src http://people.debian.org/~dexter php5.1 sarge

tdn · 2006-10-18 17:54:49

So I should add :2 to the blacklist-field. What does that?

ruud · 2006-10-18 17:55:50

And if you do <?php var_dump(gethostbynamel('250.103.91.83.sbl.spamhaus.org')); ?>, does that give the same result?
Is 83.221.155.180 the IPnr of the server where your website is hosted?

I’ve just tested with php5-cli (Debian Etch) and that one gives the correct results.

Adding :2 checks if the blacklist returns 127.0.0.2 as an answer. It’s more explicit than just checking if an answer is returned at all.

Last edited by ruud (2006-10-18 17:57:09)

tdn · 2006-10-18 17:59:03

Added the line to my php test file. It now gives:

array(1) { [0]=> string(14) "83.221.155.180" } array(1) { [0]=> string(14) "83.221.155.180" }

The IP address of the webserver is 83.221.155.180 and 83.221.155.181. This particular virtual host uses 83.221.155.180.

1beb · 2006-10-18 18:11:43

It’s funny that you mention this, I tried posting a comment to the textpattern blog this morning and it told me that I was a spammer. perhaps this is something that requires a deeper look.

ruud · 2006-10-18 18:14:45

True… I’m installing the same PHP package 5.1.4 so I can try reproducing it.

php5.1-cli and php5-cgi give the correct result (same package as used tdn, the topic starter), but I’m using them from the command line to avoid having to reconfigure Apache.

tdn: can you try executing that test PHP file from the command line in an SSH session:
php5.1-cgi testfile.php

Last edited by ruud (2006-10-18 18:20:15)

tdn · 2006-10-18 18:27:08

array(1) {
  [0]=>
  string(14) "83.221.155.180"
}
array(1) {
  [0]=>
  string(14) "83.221.155.180"
}

ruud · 2006-10-18 18:32:05

Did the :2 workaround help?
I’m not able to reproduce the problem you have, even with the exact same PHP package installed, but since you’re not the only one who experienced this problem… there have to be similarities between the two cases that we’ve seen so far.

tdn · 2006-10-18 18:36:21

I have four different virtual hosts all running textpattern 4.0.4 with the same problem.

I just tried the :2 now and it did help. But is this the correct thing to do? Shouldn’t it work without the :2 part?

Textpattern CMS

Textpattern CMS support forum

#1 2006-10-18 15:00:41

Textpattern says that my IP is blacklisted even though it is not

#2 2006-10-18 16:50:49

Re: Textpattern says that my IP is blacklisted even though it is not

#3 2006-10-18 17:04:56

Re: Textpattern says that my IP is blacklisted even though it is not

#4 2006-10-18 17:06:02

Re: Textpattern says that my IP is blacklisted even though it is not

#5 2006-10-18 17:26:32

Re: Textpattern says that my IP is blacklisted even though it is not

#6 2006-10-18 17:47:57

Re: Textpattern says that my IP is blacklisted even though it is not

#7 2006-10-18 17:53:18

Re: Textpattern says that my IP is blacklisted even though it is not

#8 2006-10-18 17:54:49

Re: Textpattern says that my IP is blacklisted even though it is not

#9 2006-10-18 17:55:50

Re: Textpattern says that my IP is blacklisted even though it is not

#10 2006-10-18 17:59:03

Re: Textpattern says that my IP is blacklisted even though it is not

#11 2006-10-18 18:11:43

Re: Textpattern says that my IP is blacklisted even though it is not

#12 2006-10-18 18:14:45

Re: Textpattern says that my IP is blacklisted even though it is not

#13 2006-10-18 18:27:08

Re: Textpattern says that my IP is blacklisted even though it is not

#14 2006-10-18 18:32:05

Re: Textpattern says that my IP is blacklisted even though it is not

#15 2006-10-18 18:36:21

Re: Textpattern says that my IP is blacklisted even though it is not

Board footer