Re: Looking for advice about limiting DNS queries

2023-01-06 Thread Kevin A. McGrail
I am 99% sure you will be unable to implement that in SA natively and easily without something such as a milter. Using mimedefang, we have significant code to allow people to submit samples to create the KAM ruleset and maintain the RBL. In short, I think we have solved the exact problem you're ta

Looking for advice about limiting DNS queries

2023-01-06 Thread Brian Conry
Hi, First things first: * SpamAssassin version: 3.4.2 * Debian 10 * SA is created and invoked as a Perl object by a MIMEDefang filter What I'm looking for is a way to tell SA to only run DNS checks on names that it finds in the headers of the message, i.e. to not scan the body of the message f

Re: Refused by block lists

2023-01-06 Thread joe a
On 1/6/2023 12:49 PM, John Hardin wrote: On Fri, 6 Jan 2023, joe a wrote: . .. I think you're getting distracted by the word "resolve" there... This sounds like a DNS issue. Agree it is likely a DNS issue. Apparently one I do not yet grasp. Is there an online tool to which I can make a DN

Re: Refused by block lists

2023-01-06 Thread Benny Pedersen
joe a skrev den 2023-01-06 18:35: On 1/6/2023 12:15 PM, Kevin A. McGrail wrote: My interpretation is thus: You have a firewall with a public IP and an private IP You have a box with email behind that firewall. When it talks to the world, it should do helo that maps back to your Firewall's p

Re: Refused by block lists

2023-01-06 Thread John Hardin
On Fri, 6 Jan 2023, joe a wrote: Attempting to utilize the various block lists and find rejection messages in mail headers "blocked due to usage of an open resolver". Are you forwarding your SpamAssassin DNS queries to your ISP or (e.g.) Google? Best practice is to set up a local, non-forwa

Re: Refused by block lists

2023-01-06 Thread joe a
On 1/6/2023 12:15 PM, Kevin A. McGrail wrote: My interpretation is thus: You have a firewall with a public IP and an private IP You have a box with email behind that firewall. When it talks to the world, it should do helo that maps back to your Firewall's public IP not to a private RFC1918 a

Re: Refused by block lists

2023-01-06 Thread Kevin A. McGrail
My interpretation is thus: You have a firewall with a public IP and an private IP You have a box with email behind that firewall. When it talks to the world, it should do helo that maps back to your Firewall's public IP not to a private RFC1918 address. Regards,KAM On 1/6/2023 12:00 PM, joe

Refused by block lists

2023-01-06 Thread joe a
Attempting to utilize the various block lists and find rejection messages in mail headers "blocked due to usage of an open resolver". One of many things puzzling me at the moment is something found in the related Wiki that states "A: Third, if your email gateway is behind a firewall make sure