I am already running my own unbound resolver. Van I configure my unbound in such a way that it forwards everything to 9.9.9.9 (which is my setting so I can use its blocking) except DNS queries for spamhaus.org <http://spamhaus.org/>?
If not, I need some way to tell postfix to use another resolver than the default one. Or I must forego the use of 9.9.9.9 and lose its DNS blocking of ‘evil’ hosts. G > On 4 Mar 2022, at 19:57, Noel Jones <njo...@megan.vbhcs.org> wrote: > > > On 3/4/2022 11:58 AM, Gerben Wierda wrote: > >> Feb 27 06:02:19 mail postfix/dnsblog[46930]: addr 113.197.35.193 listed by >> domain zen.spamhaus.org <http://zen.spamhaus.org> as *127.255.255.254* > > This query was made on 27 Feb via a public DNS nameserver that is blocked by > spamhaus. > > >> Mar 04 18:44:25 mail postfix/dnsblog[88230]: addr 189.51.96.252 listed by >> domain zen.spamhaus.org <http://zen.spamhaus.org> as *127.0.0.4* > > This query on 04 Mar was made via a different DNS nameserver that was not > blocked by spamhaus. > > If you're using a public DNS service, it's possible some of their back-end > servers are blocked and some aren't, which will give you unpredictable > results. > > To fix, insure you either use a local DNS nameserver installed on your > computer, such as unbound, or sign up for the free (for low volume) Spamhaus > Data Query Service > > > > -- Noel Jones
