On Mon, 2017-09-18 at 11:11 -0400, Bill Cole wrote: > On 18 Sep 2017, at 10:57, Chris wrote: > > [...] > > > > > > > > I am receiving many hits on *_IADB_* rules just fine recently for > > > emails > > > from constantcontact.com and others. > > I'm receiving rule hits: > > > > TOP HAM RULES FIRED > > RANK RULE NAME COUNT %OFMAIL > > %OFSPAM %OFHAM > > 40 RCVD_IN_IADB_SPF 4 4.26 0.00 4.5 > > 5 > > 43 RCVD_IN_IADB_LISTED 4 4.26 0.00 4.5 > > 5 > > 48 RCVD_IN_IADB_DK 4 4.26 0.00 4.5 > > 5 > > 51 RCVD_IN_IADB_RDNS 3 3.19 0.00 3.4 > > 1 > > 55 RCVD_IN_IADB_SENDERID 3 3.19 0.00 3.4 > > 1 > > 81 RCVD_IN_IADB_OPTIN 1 1.06 0.00 1.1 > > 4 > > > > Yesterday instead of seeing host unreachable as I posted above I'm > > seeing this > > > > Sep 17 09:30:41 localhost named[1284]: REFUSED unexpected RCODE > > resolving 'isipp.com/NS/IN': 168.150.251.35#53 > > Sep 17 09:30:41 localhost named[1284]: REFUSED unexpected RCODE > > resolving 'concerto.isipp.com/A/IN': 168.150.251.35#53 > > Sep 17 09:30:41 localhost named[1284]: REFUSED unexpected RCODE > > resolving '10.232.124.38.iadb.isipp.com/A/IN': 168.150.251.35#53 > Why are you asking 168.150.251.35 to do DNS resolution for you? It is > not authoritative for isipp.com, so presumably you have a specific > local config causing you to use it. It is explicitly refusing to do > DNS resolution for you.
I honestly have no idea where that came about. I know that on Saturday I was seeing this: SERVFAIL unexpected RCODE resolving '121.244.54.142.iadb.isipp.com/A/IN': 67.227.187.192#53 Then yesterday I started seeing named[1284]: REFUSED unexpected RCODE resolving 'isipp.com/NS/IN': 168.150.251.35#53 So to be honest I have no idea where it's coming from. Something appears to be messed up somewhere to be sure. However, I've made absolutely no changes to anything. -- Chris KeyID 0xE372A7DA98E6705C 31.11972; -97.90167 (Elev. 1092 ft) 11:04:17 up 1:42, 1 user, load average: 0.53, 0.34, 0.38 Description: Ubuntu 16.04.3 LTS, kernel 4.10.0-35-generic
signature.asc
Description: This is a digitally signed message part