On 07-01-18 16:26, Jan Klein wrote:
> Hi.
> 
> For work I am investigating an issue where none of the dns blacklists
> are used.
> We are using the current spamassassin version and also current version
> of Net::DNS.

We can't say a thing about version 'curent'. Please state full versions
of spamassassin, Net::DNS and debian. Also, tell us how you installed
spamassassin: are these distro packages or a manual install (if so: tell
us how you did that).

> 
> It is installed on a current version debian system.
> We run a local nameserver using bind.
> We invoke spamassassin via "spamassassin -t < testmail" where testmail
> is a spam mail.

Please post full output of  'spamassassin -t -D < testmail'

> 
> The weird thing is that a "dig" command works fine on the debian system,
> so name resolving is actually working outside of spamassassin. And after
> using the dig command to check the origin of the mail: dig
> xxx.xxx.xxx.xxx.zen.spamhaus.org
> Then after using that command, spamassassin will then consider spamhaus
> when checking the testmail. Probably because the dns entry is cached for
> a while or something. It will work for some minutes. Same thing with
> other blacklists. After a dig command spamassassin will start using the
> respective rule.
> 
> What is going on? It seems to be DNS related. I've read that Net::DNS is
> responsible for dns resolving for spamassassin. How can I check if it is
> working correctly? In my /etc/resolv.conf there is only one entry:
> 127.0.0.1 since we are running a local nameserver (again: dig or host
> command work just fine for name resolving ).
> 

What dns related settings do you have configured in /etc/spamassassin?

Please show values for:
- dns_available
- dns_server
- clear_dns_servers
- dns_local_ports_permit
- dns_local_ports_avoid
- dns_local_ports_none
- dns_options
- dns_query_restriction
- clear_dns_query_restriction
- rbl_timeout

You can find the meaning of these (and many other) configuration options
at:
https://spamassassin.apache.org/full/3.4.x/doc/Mail_SpamAssassin_Conf.html

Kind regards,

        Tom

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to