Re: cbl RBL (RESOLVED)

2007-01-28 Thread Thomas Bolioli
Thomas Bolioli wrote: Anyone with ideas, they would be greatly appreciated but right now I need to determine if it is SA that is having issues with the lookups or are the accounts screwed up in some way. bind does not seem to be throttled either so the volume of queries should not be the issue

Re: cbl RBL

2007-01-28 Thread Thomas Bolioli
Theo Van Dinter wrote: On Sat, Jan 27, 2007 at 06:52:29PM -0500, Thomas Bolioli wrote: /etc/procmail and it is fired off with a user .forward file "|IFS=' ' && exec /usr/bin/procmail || exit 75 #tpblists". Still looking into Net::DNS. A few ideas. First, do DROPPRIVS=yes if you haven'

Re: cbl RBL

2007-01-27 Thread Thomas Bolioli
Thomas Bolioli wrote: Theo Van Dinter wrote: On Sat, Jan 27, 2007 at 05:25:59PM -0500, Thomas Bolioli wrote: vanilla ones and customized ones. Yet, account x is the only one that RBL lookups is working on. Is there anything in how SA deals with DNS lookups that could cause this? SA c

Re: cbl RBL

2007-01-27 Thread Theo Van Dinter
On Sat, Jan 27, 2007 at 06:52:29PM -0500, Thomas Bolioli wrote: > /etc/procmail and it is fired off with a user .forward file "|IFS=' ' && > exec /usr/bin/procmail || exit 75 #tpblists". Still looking into Net::DNS. A few ideas. First, do DROPPRIVS=yes if you haven't already. Second, why are yo

Re: cbl RBL

2007-01-27 Thread Thomas Bolioli
Theo Van Dinter wrote: On Sat, Jan 27, 2007 at 05:25:59PM -0500, Thomas Bolioli wrote: vanilla ones and customized ones. Yet, account x is the only one that RBL lookups is working on. Is there anything in how SA deals with DNS lookups that could cause this? SA calls Net::DNS, which as

Re: cbl RBL

2007-01-27 Thread Thomas Bolioli
Theo Van Dinter wrote: On Sat, Jan 27, 2007 at 04:52:23PM -0500, Thomas Bolioli wrote: The RBL checks fired off from the command line (while a queryperf was running against the DNS server...) but not when postfix passes the email off through procmail as the same users ID. This is stumping me

Re: cbl RBL

2007-01-27 Thread Theo Van Dinter
On Sat, Jan 27, 2007 at 04:52:23PM -0500, Thomas Bolioli wrote: > The RBL checks fired off from the command line (while a queryperf was > running against the DNS server...) but not when postfix passes the email > off through procmail as the same users ID. This is stumping me. Any ideas? /etc/pro

Re: cbl RBL

2007-01-27 Thread Theo Van Dinter
On Sat, Jan 27, 2007 at 04:38:54PM -0500, Thomas Bolioli wrote: > Definitely not disabled (rules or rbl checks). local mode What is that? Local mode is the -L commandline parameter to spamassassn and spamd. It disables all network rules. -- Randomly Selected Tagline: "When cryptography is o

Re: cbl RBL

2007-01-27 Thread Theo Van Dinter
On Sat, Jan 27, 2007 at 05:25:59PM -0500, Thomas Bolioli wrote: > vanilla ones and customized ones. Yet, account x is the only one that > RBL lookups is working on. Is there anything in how SA deals with DNS > lookups that could cause this? SA calls Net::DNS, which as far as I know just looks at

Re: cbl RBL

2007-01-27 Thread Thomas Bolioli
Thomas Bolioli wrote: Theo Van Dinter wrote: On Sat, Jan 27, 2007 at 09:19:40PM -, Alexis Manning wrote: If you're not seeing *any* BLs ever firing in your SA-marked up mails then it'd sound like a DNS issue, e.g. misconfigured firewall or router. Or you've disabled rules, or disa

Re: cbl RBL

2007-01-27 Thread Thomas Bolioli
Theo Van Dinter wrote: On Sat, Jan 27, 2007 at 09:19:40PM -, Alexis Manning wrote: If you're not seeing *any* BLs ever firing in your SA-marked up mails then it'd sound like a DNS issue, e.g. misconfigured firewall or router. Or you've disabled rules, or disabled rbl checks, or you

Re: cbl RBL

2007-01-27 Thread Thomas Bolioli
Theo Van Dinter wrote: On Sat, Jan 27, 2007 at 09:19:40PM -, Alexis Manning wrote: If you're not seeing *any* BLs ever firing in your SA-marked up mails then it'd sound like a DNS issue, e.g. misconfigured firewall or router. Or you've disabled rules, or disabled rbl checks, or you

Re: cbl RBL

2007-01-27 Thread Thomas Bolioli
Alexis Manning wrote: Thomas Bolioli <[EMAIL PROTECTED]> wrote: Right you are... Then I have another issue. My RBL checks are not firing off... If you're not seeing *any* BLs ever firing in your SA-marked up mails then it'd sound like a DNS issue, e.g. misconfigured firewall or router.

Re: cbl RBL

2007-01-27 Thread Theo Van Dinter
On Sat, Jan 27, 2007 at 09:19:40PM -, Alexis Manning wrote: > If you're not seeing *any* BLs ever firing in your SA-marked up mails then > it'd sound like a DNS issue, e.g. misconfigured firewall or router. Or you've disabled rules, or disabled rbl checks, or you're running in local mode, or .

Re: cbl RBL

2007-01-27 Thread Alexis Manning
Thomas Bolioli <[EMAIL PROTECTED]> wrote: > Right you are... Then I have another issue. My RBL checks are not firing > off... If you're not seeing *any* BLs ever firing in your SA-marked up mails then it'd sound like a DNS issue, e.g. misconfigured firewall or router. If you're seeing some interm

Re: cbl RBL

2007-01-27 Thread Thomas Bolioli
Alexis Manning wrote: [EMAIL PROTECTED] wrote: I am trying to get lookups against cbl (http://cbl.abuseat.org/) and it does not seem to be working. Not a direct answer to your rules question, but isn't the CBL already included in the XBL check? -- A. Right you are... Then I have an

Re: cbl RBL

2007-01-27 Thread Alexis Manning
[EMAIL PROTECTED] wrote: > I am trying to get lookups against cbl (http://cbl.abuseat.org/) and > it does not seem to be working. Not a direct answer to your rules question, but isn't the CBL already included in the XBL check? -- A.

cbl RBL

2007-01-27 Thread tpblists
I am trying to get lookups against cbl (http://cbl.abuseat.org/) and it does not seem to be working. Below is what I am adding to the local cf but it is not firing off. Also, I tried both check_rbl() and check_rbl_txt(). What am I doing wrong here. Thanks, Tom FYI: CBL is catching a lot of t