In a move to prevent comment spam, The Serendipity Team recently implemented the ability to lookup the IP of comment posters in different RBL databases. After a few live tests it became apparent that RBL checking can cripple your blog if your nameserver is not setup correctly.
RBL checking works by looking up X.X.X.X.sbl-xbl.spamhaus.org, if the result of this lookup is different than the original hostname it is assumed that the IP is listed in the selected RBL. However some nameservers does not follow this vital step, they resolve “nonworkingdomainflaf.com” to an IP, which in affect makes RBL checking useless and prevents people from submitting comments on your blog.
Here is an example of a broken nameserver, when using gethostbyname():
Working nameserver:
147.147.197.80.sbl-xbl.spamhaus.org => 147.147.197.80.sbl-xbl.spamhaus.org
Broken nameserver:
147.147.197.80.sbl-xbl.spamhaus.org => 212.212.212.212 (example IP)
A symptom I like to call “The SiteFinder Effect” (adopted from VeriSign’s attempt to destroy the internet, where unknown hostnames gets resolved despite the lack of existence).
To make a long story short: make sure your nameservers are correctly setup before you even attempt to use an RBL.
Using RBL to prevent comment spam has been disabled by default in Serendipity