Blocking Email

DanR

New member
Joined
Sep 1, 2019
Messages
3
Hey!

My server seems to be blocking email... See below;

2019-09-05 09:25:20 H=(styx.mamtearock.top) [IP] F=<SENDER> rejected RCPT <EMAILACCOUNT>: Email blocked by zen.spamhaus.org

How can I just deliver these and get SpamAssassin to deal with it? As its blocking an email I need, however its not getting far enough to be pipped into my SPAM folder?

Thanks
Dan
 

DanR

New member
Joined
Sep 1, 2019
Messages
3
I think I have fixed it... is it related to "Use RBL Blocking"?

Dan
 

wtptrs

Verified User
Joined
Jul 13, 2015
Messages
71
You can configure which Email Blacklists (RBL) to use in /etc/exim.conf:

RBL_DNS_LIST=\
cbl.abuseat.org : \
bl.spamcop.net : \
b.barracudacentral.org : \
zen.spamhaus.org
You generally want to leave RBL blocking enabled. If the sender IP is listed by zen.spamhaus.org, it has probably been (ab)used for sending out spam. It's up to the owner of the IP to fix the issue and delist his IP.

You can use the following files:

/etc/virtual/skip_rbl_hosts (hostname)
/etc/virtual/skip_rbl_hosts_ip (ip)
to leave RBL Blocking enabled and disable RBL checks on a specific sender.
 
Last edited:

Richard G

Verified User
Joined
Jul 6, 2008
Messages
4,217
Location
Maastricht
It's better not to change exim.conf as it can be overwritten on an update.
If you want to change RBL's you can better use the exim.strings.conf.custom for it.
We also removed spamhaus due to some issues we were having, because they also look for the dynamic ip's of the sender and can block based on that.
So it's better to use sbl-xbl.zenhaus.org maybe.

We got a exim.strings.conf.custom containing this:
Code:
RBL_DNS_LIST==cbl.abuseat.org : bl.spamcop.net : b.barracudacentral.org
which as you can see takes care that zen.spamhaus.org is not used and you can leave the original exim.conf alone.

Be aware that when using barracudacentral you can use it like this, but officially you have to register there and put in your server ip using it. It's free.
 

johannes

Verified User
Joined
Feb 18, 2007
Messages
223
As i had the same problem with an remote email sender blocked by our RBLs, i checked what Richard tolds and didnt found /etc/virtual/skip_rbl_hosts
but instead found
/etc/virtual/skip_rbl_domains .. and ..
/etc/virtual/skip_rbl_hosts_ip

I came up with following questions:
a) is skip_rbl_hosts the same as skip_rbl_domains (was it just replaced by name) or do I miss the file
b) whats the right nomenclature to add domains to skip_rbl_domains (or skip_rbl_hosts) .. just "domainname.xy" , or with placeholder * before, as "*.domainname.xy"?
c) is there a way to just exclude one specific emailadress from RBL checks? (as it is on the other side with the whitelists)?

And to the whitelists .. whats the concrete difference between whitelist_from and whitelist_senders ?

Thank you
 

Richard G

Verified User
Joined
Jul 6, 2008
Messages
4,217
Location
Maastricht
Top