You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Uwe Schindler <us...@apache.org> on 2018/03/16 11:18:10 UTC
RE: skipping nameserver '0.ns.spamhaus.org' because it is a CNAME
Hi Stephan,
> I see the problems as well in my postfix logs (I’m a Hetzner custom=r as
> well):
> warning: dnsblog_query: lookup error for DNS query
> 36.142.70.194.zen.spamha=s.org: Host or domain name not found. Name
> service error for name=36.142=2E70.194.zen.spamhaus.org type=A: Host not
> found, try again
>
> If I trace the DNS traffic I see that there are no DNS responses (IPv4
> and IPv6).
Did you solve this problem in the meantime? Unfortunately this also affects my low-email-traffic Hetzner vserver, too. I also use a local DNS (unbound). From what I figured out, any requests to spamhaus servers from any IPv4 or IPv6 address of most Hetzner subnets are ignored. If I do the request from any other IP (outside Hetzner) it works. Nevertheless, this IP blocking issue is a different one than the CNAME issue discussed here.
Unfortunately this issue affects one of the servers @Hetzner that Apache Lucene is using to test their builds. The issue started around December 15th, 2017.
Uwe
-----
Uwe Schindler
uschindler@apache.org
ASF Member, Apache Lucene PMC / Committer
Bremen, Germany
http://lucene.apache.org/
Re: skipping nameserver '0.ns.spamhaus.org' because it is a CNAME
Posted by "@lbutlr" <kr...@kreme.com>.
On 2018-03-20 (04:56 MDT), Uwe Schindler <us...@apache.org> wrote:
>
> why they not simply blocked the Hetzner recursive name servers instead of everything
I would have to assume bad behavior on Hetzner's part.
--
'And stars don't care what you wish, and magic don't make things better,
and no-one doesn't get burned who sticks their hand in a fire.'
RE: skipping nameserver '0.ns.spamhaus.org' because it is a CNAME
Posted by Uwe Schindler <us...@apache.org>.
Hi,
Thanks Stephan, the same happened to me. It is still unclear to me, why they not simply blocked the Hetzner recursive name servers instead of everything. The offered solution is also fine, but bad for other users of their service through SpamAssassin or Postfix, correctly setting everything up using a local (e.g., unbound) recursive DNS server.
Uwe
-----
Uwe Schindler
uschindler@apache.org
ASF Member, Apache Lucene PMC / Committer
Bremen, Germany
http://lucene.apache.org/
> -----Original Message-----
> From: Stephan Seitz <st...@fsing.rootsland.net>
> Sent: Tuesday, March 20, 2018 10:59 AM
> To: Uwe Schindler <us...@apache.org>
> Cc: users@spamassassin.apache.org; 'Alex Lasoriti' <la...@spamteq.com>
> Subject: Re: skipping nameserver '0.ns.spamhaus.org' because it is a CNAME
>
> Hi Uwe!
>
> On Fr, Mär 16, 2018 at 12:18:10 +0100, Uwe Schindler wrote:
> >Did you solve this problem in the meantime? Unfortunately this also
>
> Yes, I was contaced by a key account manager of Spamhaus. I got a free
> datafeed query service key.
>
> Maybe you could contact Spamhaus to tell them about your problems?
>
> Shade and sweet water!
>
> Stephan
>
> --
> | Public Keys: http://fsing.rootsland.net/~stse/keys.html |
Re: skipping nameserver '0.ns.spamhaus.org' because it is a CNAME
Posted by Stephan Seitz <st...@fsing.rootsland.net>.
Hi Uwe!
On Fr, Mär 16, 2018 at 12:18:10 +0100, Uwe Schindler wrote:
>Did you solve this problem in the meantime? Unfortunately this also
Yes, I was contaced by a key account manager of Spamhaus. I got a free
datafeed query service key.
Maybe you could contact Spamhaus to tell them about your problems?
Shade and sweet water!
Stephan
--
| Public Keys: http://fsing.rootsland.net/~stse/keys.html |