Koozali.org: home of the SME Server

Obsolete Releases => SME Server 8.x => Topic started by: holck on February 22, 2014, 09:18:22 PM

Title: Problem with closed RBL (Real-time Blackhole List) servers?
Post by: holck on February 22, 2014, 09:18:22 PM

Following the recommendations from the Wiki (http://wiki.contribs.org/Email#Real-time_Blackhole_List_.28RBL.29), I have for a long time and with good success used three RBLs: zen.spamhaus.org, whois.rfc-ignorant.org, and dnsbl.njabl.org.

This morning my server suddenly started to reject most incoming qpsmtpd connections with messages like this:

Code: [Select]

2014-02-22 05:57:26.191085500 4408 logging::logterse plugin (deny): ` 123.456.78.90     Unknown [192.168.100.5] <peter.petersen@rowindo.com>             rhsbl   901     v=spf1  msg denied before queued
I checked the qpsmtpd log-files, and at least for the last few weeks, I've not before seen mail connections rejected with a rhsbl tag. But from this morning, nearly all connections were rejected with the rhsbl tag. I checked the qpsmptd configuration and then found out that only the zen.spamhaus.org list seems to be working. I can't find IP addresses for the other two, whois.rfc-ignorant.org and dnsbl.njabl.org.

So I changed the qpsmtpd configuration:

Code: [Select]

config delprop qpsmtpd SBLList
config setprop qpsmtpd RBLList zen.spamhaus.org
signal-event email-update
And now things seems to be working fine again. So I guess that maybe the closed services caused qpsmtpd to reject all my incoming mails?

Jesper, Denmark

Title: Re: Problem with closed RBL (Real-time Blackhole List) servers?
Post by: raem on February 22, 2014, 10:52:36 PM

holck

Quote

Following the recommendations from the Wiki (http://wiki.contribs.org/Email#Real-time_Blackhole_List_.28RBL.29)

Wiki has been amended to remove whois.rfc-ignorant.org and dnsbl.njabl.org etc.

Here are some posts that refer to shutdown of these services

http://www.dnsbl.com/2012/09/status-of-rfc-ignorantorg-shutting-down.html

http://www.dnsbl.info/dnsbl-njabl-org.php

Title: Re: Problem with closed RBL (Real-time Blackhole List) servers?
Post by: CharlieBrady on February 23, 2014, 01:04:17 AM

Quote from: holck on February 22, 2014, 09:18:22 PM

Following the recommendations from the Wiki (http://wiki.contribs.org/Email#Real-time_Blackhole_List_.28RBL.29), I have for a long time and with good success used three RBLs: zen.spamhaus.org, whois.rfc-ignorant.org, and dnsbl.njabl.org.

This morning my server suddenly started to reject most incoming qpsmtpd connections with messages like this:

So you should create two bugs in the bug tracker. One in Documentation to update the documentation in the wiki. The other, to add code so that those non-functioning RBLs are automatically deleted from the configuration.

Title: Re: Problem with closed RBL (Real-time Blackhole List) servers?
Post by: wellsi on February 23, 2014, 05:18:34 PM

Here is the bug for removing the affected RBLs http://bugs.contribs.org/show_bug.cgi?id=8235

Title: Re: Problem with closed RBL (Real-time Blackhole List) servers?
Post by: wellsi on February 26, 2014, 11:33:53 PM

This has now been released for SME 8