I have a couple of issues with my LAN /w SpamAssassin, 1. Wrong resolved used
Nov 14 07:51:51 whirlwind spamd[4041]: spamd: connection from gamecock.fredriksson.dy.fi [192.168.1.123]:59338 to port 783, fd 5 Nov 14 07:51:51 whirlwind spamd[4041]: spamd: processing message <20171114055150.15886142...@mail.bitwell.biz> for spam:1001 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [::1]:53 failed: Connection refused, failing over to [127.0.0.1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, failing over to [::1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [::1]:53 failed: Connection refused, failing over to [127.0.0.1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, failing over to [::1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [::1]:53 failed: Connection refused, failing over to [127.0.0.1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, failing over to [::1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [::1]:53 failed: Connection refused, failing over to [127.0.0.1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, failing over to [::1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [::1]:53 failed: Connection refused, failing over to [127.0.0.1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, failing over to [::1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [::1]:53 failed: Connection refused, failing over to [127.0.0.1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, failing over to [::1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [::1]:53 failed: Connection refused, failing over to [127.0.0.1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, failing over to [::1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [::1]:53 failed: Connection refused, failing over to [127.0.0.1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, failing over to [::1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [::1]:53 failed: Connection refused, failing over to [127.0.0.1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, failing over to [::1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [::1]:53 failed: Connection refused, failing over to [127.0.0.1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, failing over to [::1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [::1]:53 failed: Connection refused, failing over to [127.0.0.1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, failing over to [::1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: sendto() to [::1]:53 failed: Connection refused, failing over to [127.0.0.1]:53 Nov 14 07:51:51 whirlwind spamd[4041]: dns: bad dns reply: corrupt wire-format data at /usr/share/perl5/Net/DNS/Packet.pm line 118, <GEN1631> line 63. Nov 14 07:51:53 whirlwind spamd[4041]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, failing over to [::1]:53 Nov 14 07:51:53 whirlwind spamd[4041]: dns: bad dns reply: corrupt wire-format data at /usr/share/perl5/Net/DNS/Packet.pm line 118, <GEN1632> line 147. $ cat /etc/resolv.conf jarif@whirlwind:~$ cat /etc/resolv.conf # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8) # DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN # 127.0.0.53 is the systemd-resolved stub resolver. # run "systemd-resolve --status" to see details about the actual nameservers. nameserver 127.0.0.53 search fredriksson.dy.fi Where does SA take its DNS resolver? 2. URIBL BLOCKED I have two kinds of resolvers for my LAN. - non forwarding caching name servers x 3 - these are meant to be by SpamAssassin and servers - forwarding caching and filtering (PiHole) name servers x 2 - these are meant to be used by desktop PC’s, cellphones and laptops Now I get Administrative warnings on SpamAssassin resport about URIBL_BLOCK. The Dhcp tells the SpamAssassin boxes to use only the non-forwarding resolvers, but apparently there is something not working here now. Where does SA take its DNS resolver? br. jarif
signature.asc
Description: Message signed with OpenPGP
