On Tue, 6 Feb 2024, Odhiambo Washington wrote:
On Wed, Feb 7, 2024 at 12:53 AM Mark Milhollan <lists-mai...@milhollan.com>
wrote:
On Tue, 6 Feb 2024, Odhiambo Washington wrote:
Today morning I woke up to all emails being rejected as I was using
zen.spamhaus.org in my dnslists.
Are you using your own resolver (like BIND, Knot Resolver, or Unbound)
rather than a public resolver (like Cloudflare, Google, or Quad9)?
I have my local instance of unbound resolver.
I should have mentioned that it must not use a forwarder, it must query
Spamhaus directly. What results do you obtain if you query for
127.0.0.1, e.g., ''dig 1.0.0.127.zen.spamhaus.org''? If the result is
that there are no records (NXDOMAIN) then the problem isn't use of an
open resolver. But if the result is 127.255.255.254 then you are using
an open resolver and you must find a way to stop doing so -- if you must
use a forwarder then be sure to specify that for zen.spamhaus.org it
should not. Otherwise you need to stop using Spamhaus -- even if you
sign-up, perhaps because of the query volume, you still must query them
directly not via a public resolver.
/mark
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
