On 18 Sep 2017, at 10:57, Chris wrote: [...] >> I am receiving many hits on *_IADB_* rules just fine recently for >> emails >> from constantcontact.com and others. > > I'm receiving rule hits: > > TOP HAM RULES FIRED > RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM > 40 RCVD_IN_IADB_SPF 4 4.26 0.00 4.55 > 43 RCVD_IN_IADB_LISTED 4 4.26 0.00 4.55 > 48 RCVD_IN_IADB_DK 4 4.26 0.00 4.55 > 51 RCVD_IN_IADB_RDNS 3 3.19 0.00 3.41 > 55 RCVD_IN_IADB_SENDERID 3 3.19 0.00 3.41 > 81 RCVD_IN_IADB_OPTIN 1 1.06 0.00 1.14 > > Yesterday instead of seeing host unreachable as I posted above I'm > seeing this > > Sep 17 09:30:41 localhost named[1284]: REFUSED unexpected RCODE > resolving 'isipp.com/NS/IN': 168.150.251.35#53 > Sep 17 09:30:41 localhost named[1284]: REFUSED unexpected RCODE > resolving 'concerto.isipp.com/A/IN': 168.150.251.35#53 > Sep 17 09:30:41 localhost named[1284]: REFUSED unexpected RCODE > resolving '10.232.124.38.iadb.isipp.com/A/IN': 168.150.251.35#53
Why are you asking 168.150.251.35 to do DNS resolution for you? It is not authoritative for isipp.com, so presumably you have a specific local config causing you to use it. It is explicitly refusing to do DNS resolution for you.
signature.asc
Description: OpenPGP digital signature