[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Spamassassin generating DNSBL blocks



Running a Postfix mail server with Spamassassin, over the last several
months the server logs have contained a large number of entries like
these:

   spamd: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries)

   spamd: check: dns_block_rule RCVD_IN_DNSWL_BLOCKED hit, creating /root/.spamassassin/dnsblock_list.dnswl.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny list.dnswl.org" to disable queries)

(and many, many more).  My /etc/resolv.conf file contains the lines:

   nameserver 8.8.8.8
   nameserver 8.8.4.4

When I run "sudo service resolvconf status," it reports that
/lib/systemd/system/resolvconf.service is enabled and active.

Can I get rid of these "too many queries" errors by inserting lines

   dns_query_restriction deny sa-accredit.habeas.com
   dns_query_restriction deny list.dnswl.org
   ...

into the file /etc/mail/spamassassin?  (Or do they go in some other
configuration file?)  Will that interfere with proper spam filtering?
The alternative instruction provided in the logs, "set all affected
rules score to 0," is rather opaque; I'm not sure how that is to be done.

Best regards,
Greg Marks

Attachment: signature.asc
Description: PGP signature


Reply to: