dns uri rbl ?

[d3xt3r01]

This might be helpful for various services that don't/can't do api requests...
The default 127.0.0.X reply could be augmented by a TXT record of sorts with the rest of details

[7c]

Thanks for suggestion.. can you please post a mockup format ?

[d3xt3r01]

Something along these lines:

$ dig +short A example.com.rbl.fakefilter.net # with a 600 TTL ?!
127.0.0.2
$ dig +short A google.com.rbl.fakefilter.net # this should give an NXDOMAIN along with SOA so the answer can be cached
$ dig +short TXT example.com.rbl.fakefilter.net
"{"retcode":200,"isFakeDomain":"example.com","details":{"provider":"someprovider.com","firstseen":1656480000,"lastseen":1656530000,"randomSubdomain":false}}"

[7c]

Thanks, i think we can do that.. We will implement this in few months... summer is very busy time.. Thanks for suggestion.