On Fri, 6 Jan 2023, joe a wrote:
Attempting to utilize the various block lists and find rejection messages in mail headers "blocked due to usage of an open resolver".
Are you forwarding your SpamAssassin DNS queries to your ISP or (e.g.) Google?
Best practice is to set up a local, non-forwarding (potentially non-forwarding only for the DNSBL domains, see my email from a week or so back) DNS server for your MTA and SpamAssassin to use (potentially your entire local network as well, but that's not relevant to your question).
DNSBL providers generally don't like requests from public DNS servers as they aggregate a lot of requests from a lot of sources.
One of many things puzzling me at the moment is something found in the related Wiki that states "A: Third, if your email gateway is behind a firewall make sure that SpamAssassin is resolving the gateway to its external address."
I think you're getting distracted by the word "resolve" there... This sounds like a DNS issue.
-- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhar...@impsec.org pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- Je ne suis pas Charlie. Je suis armé. ----------------------------------------------------------------------- Tomorrow: the 8th anniversary of the Charlie Hebdo massacre
