Koozali.org: home of the SME Server

Problem with closed RBL (Real-time Blackhole List) servers?

Offline holck

  • *
  • 322
  • +1/-0
Problem with closed RBL (Real-time Blackhole List) servers?
« on: February 22, 2014, 09:18:22 PM »
Following the recommendations from the Wiki (http://wiki.contribs.org/Email#Real-time_Blackhole_List_.28RBL.29), I have for a long time and with good success used three RBLs: zen.spamhaus.org, whois.rfc-ignorant.org, and dnsbl.njabl.org.

This morning my server suddenly started to reject most incoming qpsmtpd connections with messages like this:
Code: [Select]
2014-02-22 05:57:26.191085500 4408 logging::logterse plugin (deny): ` 123.456.78.90     Unknown [192.168.100.5] <peter.petersen@rowindo.com>             rhsbl   901     v=spf1  msg denied before queued
I checked the qpsmtpd log-files, and at least for the last few weeks, I've not before seen mail connections rejected with a rhsbl tag. But from this morning, nearly all connections were rejected with the rhsbl tag. I checked the qpsmptd configuration and then found out that only the zen.spamhaus.org list seems to be working. I can't find IP addresses for the other two, whois.rfc-ignorant.org and dnsbl.njabl.org.

So I changed the qpsmtpd configuration:
Code: [Select]
config delprop qpsmtpd SBLList
config setprop qpsmtpd RBLList zen.spamhaus.org
signal-event email-update
And now things seems to be working fine again. So I guess that maybe the closed services caused qpsmtpd to reject all my incoming mails?

Jesper, Denmark
......

Offline raem

  • *
  • 3,972
  • +4/-0
Re: Problem with closed RBL (Real-time Blackhole List) servers?
« Reply #1 on: February 22, 2014, 10:52:36 PM »
holck

Quote
Following the recommendations from the Wiki (http://wiki.contribs.org/Email#Real-time_Blackhole_List_.28RBL.29)

Wiki has been amended to remove whois.rfc-ignorant.org and dnsbl.njabl.org etc.

Here are some posts that refer to shutdown of these services

http://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html

http://www.dnsbl.info/dnsbl-njabl-org.php
...

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Problem with closed RBL (Real-time Blackhole List) servers?
« Reply #2 on: February 23, 2014, 01:04:17 AM »
Following the recommendations from the Wiki (http://wiki.contribs.org/Email#Real-time_Blackhole_List_.28RBL.29), I have for a long time and with good success used three RBLs: zen.spamhaus.org, whois.rfc-ignorant.org, and dnsbl.njabl.org.

This morning my server suddenly started to reject most incoming qpsmtpd connections with messages like this:

So you should create two bugs in the bug tracker. One in Documentation to update the documentation in the wiki. The other, to add code so that those non-functioning RBLs are automatically deleted from the configuration.

Offline wellsi

  • *
  • 475
  • +0/-0
    • http://www.wellsi.com
Re: Problem with closed RBL (Real-time Blackhole List) servers?
« Reply #3 on: February 23, 2014, 05:18:34 PM »
Here is the bug for removing the affected RBLs http://bugs.contribs.org/show_bug.cgi?id=8235
............

Offline wellsi

  • *
  • 475
  • +0/-0
    • http://www.wellsi.com
Re: Problem with closed RBL (Real-time Blackhole List) servers?
« Reply #4 on: February 26, 2014, 11:33:53 PM »
This has now been released for SME 8
............