To be more precise, we did'nt receive blocking response "127.255.255.[1..255]" from spamhaus DNS servers but a mail from them to our postmaster address which warn us that we do too much DNS requests from our IP address, not respecting the free usage policy and to use (and pay) for DQS. So I tryed to decrease the number of requests by tuning our configuration and eliminate requests that are not usefull (I found that our system do several times the same request that is not necessary). I modify our local DNS to keep cache some more times too. With this modifications I can decrease the number of requests (divided by 2 at least). I will see at the end if we can respect the 100000 requests by day.
-----Message d'origine----- De : Bowie Bailey <bowie_bai...@buc.com> Envoyé : vendredi 18 avril 2025 15:40 À : users@spamassassin.apache.org Objet : Re: disable spamhaus request On 4/17/2025 4:40 PM, Andrew C Aitchison wrote: > On Thu, 17 Apr 2025, DEMBLANS Mathieu wrote: > >> Thanks for the link, I will study that. >> Our local nameserver DOESN’T USE shared/open nameservers, it transmit >> to the good nameservers (for spamhaus, their NS). >> >> Why being so aggressive in your response ? >> You probably have a incredibly knowledge you have since you’re born, >> but I’m not, sorry. >> Instead of that have constructive responses. >> >> Clear informations are sometimes hard to find. >> If you don’t wan to help, don’t respond. > > I'll just repeat the words that Bill Cole sent last week ( > https://marc.info/?l=spamassassin-users&m=174413206312855&w=2 ): > > Please note that "Reindl Harald <h.rei...@thelounge.net>" has a bad > habit of writing pointlessly confrontational, intentionally rude, and > very often factually false replies to people posting here. That is why > you will not find his posts actually allowed on the list (and on some > other lists as > well.) With that being said, he was not incorrect in this instance. The response received from Spamhaus indicates that you were blocked due to using a public DNS server. describe RCVD_IN_ZEN_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to zen.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ You should double-check your nameserver setup and make sure it is doing what you think it is doing. Also double-check that the system running SA is actually configured to use your local nameserver (in /etc/resolv.conf or similar) and check for a dns_server setting in the SA config files that might be pointing somewhere else. -- Bowie
