Then stop using google dns or other dns servers that block dns request to rbl servers. Source : https://www.spamhaus.org/faq/section/DNSBL%20Usage
Check what DNS resolvers you are using: If you are using a free "open DNS resolver" service such as the Google Public DNS or large cloud/outsourced public DNS servers, such as Level3's or Verizon's, to resolve your DNSBL requests, in most cases you will receive a "not listed" (NXDOMAIN) reply from Spamhaus' public DNSBL servers. We recommend using your own DNS servers when doing DNSBL queries to Spamhaus. I no lame servers in my bind logs. The set below is running over 1 year now, without any problems. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: m...@junc.eu [mailto:owner-postfix-us...@postfix.org] Namens Benny > Pedersen > Verzonden: woensdag 13 juli 2016 11:36 > Aan: postfix-users@postfix.org > Onderwerp: Re: This ought to be simple to stop. Am I missing something? > > On 2016-07-13 08:55, L.P.H. van Belle wrote: > > A good combination of rbl lists with postscreen im using. > > > > postscreen_dnsbl_threshold=4 > > postscreen_dnsbl_sites = > > b.barracudacentral.org*4 > > bad.psky.me*4 > > zen.spamhaus.org*4 > > dnsbl.cobion.com*2 > > bl.spameatingmonkey.net*2 > > fresh.spameatingmonkey.net*2 > > dnsbl.anonmails.de*2 > > dnsbl.kempt.net*2 > > dnsbl.inps.de*2 > > bl.spamcop.net*2 > > dnsbl.sorbs.net*2 > > psbl.surriel.com*2 > > bl.mailspike.net*2 > > bl.suomispam.net*2 > > all.rbl.jp*2 > > swl.spamhaus.org*-4 > > last time it was tryed here bind9 says lame-servers to some of them, so > if see this then dont use them > > the good part here is postscreen sadly many of the above needs datafeeds > to be stable