I'm having a hard time getting RBL checks to work right. I don't have anything in my local config files regarding RBLs. I'm using SpamAssassin 3.1.5. Here is some debugging output, trimmed for brevity:
dbg: generic: SpamAssassin version 3.1.5 dbg: config: score set 0 chosen. dbg: util: running in taint mode? yes dbg: util: taint mode: deleting unsafe environment variables, resetting PATH dbg: util: final PATH set to: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin dbg: dns: is Net::DNS::Resolver available? yes dbg: dns: Net::DNS version: 0.59 dbg: config: using "/etc/mail/spamassassin" for site rules pre files dbg: config: read file /usr/local/share/spamassassin/20_dnsbl_tests.cf dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC dbg: reporter: network tests on, attempting SpamCop dbg: plugin: registered Mail::SpamAssassin::Plugin::SpamCop=HASH(0x93ae3f4) dbg: dns: checking RBL bl.spamcop.net., set spamcop dbg: dns: IPs found: full-external: 201.139.53.111, 70.84.192.18 untrusted: 201.139.53.111, 70.84.192.18 originating: dbg: dns: only inspecting the following IPs: 70.84.192.18, 201.139.53.111 dbg: dns: launching DNS TXT query for 18.192.84.70.bl.spamcop.net. in background dbg: dns: launching DNS TXT query for 111.53.139.201.bl.spamcop.net. in background dbg: dns: success for 18 of 18 queries dbg: check: tests=SPF_HELO_SOFTFAIL,SPF_SOFTFAIL dbg: check: subtests=__CT,__CTE,__CTYPE_CHARSET_QUOTED,__CT_TEXT_PLAIN,__HAS_MIMEOLE,__HAS_MSGID,__HAS_MSMAIL_PRI,__HAS_OUTLOOK_IN_MAILER,__HAS_RCVD,__HAS_SUBJECT,__HAS_X_MAILER,__HAS_X_PRIORITY,__MIMEOLE_MS,__MIME_VERSION,__MSGID_DOLLARS_MAYBE,__MSGID_DOLLARS_OK,__MSGID_OK_HEX,__MSGID_OK_HOST,__MSGID_RANDY,__NONEMPTY_BODY,__OE_MSGID_2,__SANE_MSGID,__TOCC_EXISTS The host 201.139.53.111 is listed by SpamCop at the time of this writing. It looks like DNS is working fine (dns: success for 18 of 18 queries), but using dig, it is clear to see that it should be triggering the SpamCop rule. # dig 111.53.139.201.bl.spamcop.net ; <<>> DiG 9.2.4 <<>> 111.53.139.201.bl.spamcop.net ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65060 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 8, ADDITIONAL: 8 ;; QUESTION SECTION: ;111.53.139.201.bl.spamcop.net. IN A ;; ANSWER SECTION: 111.53.139.201.bl.spamcop.net. 2100 IN A 127.0.0.2 Here are the SpamCop lines in my stock config files: /usr/local/share/spamassassin/20_dnsbl_tests.cf:header RCVD_IN_BL_SPAMCOP_NET eval:check_rbl_txt('spamcop', 'bl.spamcop.net.', '(?i:spamcop)') /usr/local/share/spamassassin/50_scores.cf:score RCVD_IN_BL_SPAMCOP_NET 0 1.332 0 1.558 Any clues?