Andy Dills wrote:
That's fair. Except, we're not a "large organization" by any stretch of
the imagination.
Have you checked that you are legitimately exceeding the free query
limit and that something isn't misconfigured and causing multiple
lookups of the same IP address when it could be accessed from a properly
configured caching DNS? If the spamassasin code is working correctly,
checking blocklists that are part of a larger composite list such as
Zen should not cause multiple queries, however checking the spamhaus
URIBL "DBL" is a seperate query from Zen, so you might be able to access
either Zen or DBL, but not both and still stay within the limit.
I would run tcpdump and monitor the actual queries being sent to
spamhaus to see if it's all working correctly.
Nataraj
