DBL and URIRBL rules not always hitting
Hi everyone - I've burned enough hours trying to figure this one out, and I'm finally giving up to ask for help. I'm getting hit by a ton of spam, and as I go through some of the messages with low scores, I'm noticing that a lot of the messages are from source IPs that are on one (or several) of the DNSBLs that I'm using (Spamhaus, Spamcop, and Barracuda). I've also got the Spamhaus DBL score set fairly high (10, for testing), and it rarely hits, but I can manually verify some of the URLs from message bodies that aren't showing hits on the URIBL_DBL_SPAM rule and confirm that the URLs are listed on the Spamhaus DBL.
I've run lookups via the shell from my server and confirmed that DNSBL and DBL lookups work just fine...but Spamassassin doesn't always seem to do the lookups. My mail volume is low enough that I know I'm not hitting the BLs' lookup limits/thresholds, and I'm running my own DNS server, so lookups appear to be fast. Any pointers on what may cause Spamassassin to (sometimes) not run the DNSBL/URIRBL checks?
-
Hi everyone - I've burned enough hours trying to figure this one out, and I'm finally giving up to ask for help. I'm getting hit by a ton of spam, and as I go through some of the messages with low scores, I'm noticing that a lot of the messages are from source IPs that are on one (or several) of the DNSBLs that I'm using (Spamhaus, Spamcop, and Barracuda). I've also got the Spamhaus DBL score set fairly high (10, for testing), and it rarely hits, but I can manually verify some of the URLs from message bodies that aren't showing hits on the URIBL_DBL_SPAM rule and confirm that the URLs are listed on the Spamhaus DBL. I've run lookups via the shell from my server and confirmed that DNSBL and DBL lookups work just fine...but Spamassassin doesn't always seem to do the lookups. My mail volume is low enough that I know I'm not hitting the BLs' lookup limits/thresholds, and I'm running my own DNS server, so lookups appear to be fast. Any pointers on what may cause Spamassassin to (sometimes) not run the DNSBL/URIRBL checks?
Hello use csf that will clear you all. But dont forget to set TESTING 0 And SYs 3 recomanded and after that you have to restart csf -r OR enable your RBL DNSBL byhttps://wiki.apache.org/spamassassin/DnsBlocklists
Regards Kamall;0 -
Hello use csf that will clear you all. But dont forget to set TESTING 0 And SYs 3 recomanded and after that you have to restart csf -r OR enable your RBL DNSBL by
https://wiki.apache.org/spamassassin/DnsBlocklists
Regards Kamall;
Thank you for the reply, but I'm not sure I follow. I'm already using CSF, but don't see any DNSBL options in it. Even if I can/could enable DNSBL options in CSF, I would prefer them in Spamassassin since that would allow me to utilizing the scoring method that SA uses, rather than just blocking anything on the DNSBL. Also - it's clear from looking at other messages that ARE being scored by DNSBLs that the lists ARE enabled in SA, they're just not always being utilized for some reason.0 -
Any pointers on what may cause Spamassassin to (sometimes) not run the DNSBL/URIRBL checks?
Hello, Were these senders using a valid hostname that was resolvable by SpamAssassin? Thank you.0 -
Hello, Were these senders using a valid hostname that was resolvable by SpamAssassin? Thank you.
Return-path: Envelope-to: aaron@mydomainxxx.com Delivery-date: Wed, 10 Jun 2015 19:56:34 -0700 Received: from [83.167.***.***] (port=41864 helo=) by web.fullspectrumia.com with esmtp (Exim 4.82) (envelope-from ) id 1Z2sfR-0004Ls-Md for aaron@mydomain***.com; Wed, 10 Jun 2015 19:56:34 -0700
Apparently not, actually (on a few examples, like the snippet here). But, I thought RBLs were looking up IPs, not hostnames.0 -
Also - lookups ARE working...sometimes.
This seems more likely to be the issue if lookups are not consistently working as expected. Have you considered alternate solutions such as the Greylisting feature available in cPanel version 11.50? Thank you.0
Please sign in to leave a comment.
Comments
7 comments