You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Riccardo Alfieri <ri...@spamteq.com> on 2021/02/12 14:56:58 UTC
Enforcing of new return codes for Spamhaus RBLs
Hello everyone,
this is just a friendly heads up for everyone using our RBLs through the
public mirrors. Beginning in March Spamhaus will start to enforce the
return codes for these three new conditions announced in late 2019:
127.255.255.252 - Typing error in DNSBL Name
127.255.255.254 - Query via public/open resolver/generic unattributable rDNS
127.255.255.255 - Excessive Number of Queries
SpamAssassin already has the codes in it's ruleset, so there is nothing
really to do except check the logs in March to see that your are not
hitting on any on them.
Please see the article at
https://www.spamhaus.org/news/article/807/using-our-public-mirrors-check-your-return-codes-now
for more informations
--
Best regards,
Riccardo Alfieri
Spamhaus Technology
https://www.spamhaustech.com/
Re: Enforcing of new return codes for Spamhaus RBLs
Posted by Riccardo Alfieri <ri...@spamteq.com>.
On 14/02/21 16:09, RW wrote:
>
> What does "generic unattributable rDNS" mean?
>
> I presume it will block me because I'm querying through a VPN with no
> rDNS for the shared egress IP address.
>
> If I have the queries bypass the VPN, will it also block me for having
> ISP dynamic pool rDNS.
Hello RW,
you are correct. That return code will be triggered if Spamhaus is
unable to identify who is the original querier, and with a VPN endpoint
that is most likely the case.
If you still need to do queries over VPN, then you can simply subscribe
for a free DQS account, as DQS accounts are not blocked in any way,
except if you go over quota.
--
Best regards,
Riccardo Alfieri
Spamhaus Technology
https://www.spamhaustech.com/
Re: Enforcing of new return codes for Spamhaus RBLs
Posted by RW <rw...@googlemail.com>.
On Fri, 12 Feb 2021 14:56:58 +0000
Riccardo Alfieri wrote:
> 127.255.255.254 - Query via public/open resolver/generic
> unattributable rDNS
What does "generic unattributable rDNS" mean?
I presume it will block me because I'm querying through a VPN with no
rDNS for the shared egress IP address.
If I have the queries bypass the VPN, will it also block me for having
ISP dynamic pool rDNS.