Spamassassin RBLs not functioning

Evianon

New member
Joined
Apr 11, 2016
Messages
1
Hi all,

I'm having an issue with the Spamassassin RBL checks, which do not function on many of my servers. I do have one functioning server, the setup seems to be completely identical, and I have no clue what is wrong on the non-functioning servers.

The DNS queries to the RBL simply don't seem to be completed, or the results are just discarded. An example in the SA debug log:

The non-working setup:
Code:
Apr  8 19:30:48.882 [15662] dbg: async: query 3194/IN/A/stopitadictt.xyz.dbl.spamhaus.org already underway, adding no.7 URIBL_DBL_SPAM
Apr  8 19:30:48.882 [15662] dbg: dns: URIBL_DBL_SPAM lookup start
Apr  8 19:30:48.911 [15662] dbg: async: calling callback on key DNSBL:stopitadictt.xyz:dbl.spamhaus.org, rule URIBL_DBL_SPAM
Apr  8 19:30:48.911 [15662] dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_SPAM DNSBL:stopitadictt.xyz:dbl.spamhaus.org
The working setup:
Code:
Apr  8 19:37:35.284 [9970] dbg: async: query 62185/IN/A/stopitadictt.xyz.dbl.spamhaus.org already underway, adding no.7 URIBL_DBL_SPAM
Apr  8 19:37:35.284 [9970] dbg: dns: URIBL_DBL_SPAM lookup start
Apr  8 19:37:35.330 [9970] dbg: async: calling callback on key DNSBL:stopitadictt.xyz:dbl.spamhaus.org, rule URIBL_DBL_SPAM
Apr  8 19:37:35.330 [9970] dbg: uridnsbl: complete_dnsbl_lookup URIBL_DBL_SPAM DNSBL:stopitadictt.xyz:dbl.spamhaus.org
Apr  8 19:37:35.330 [9970] dbg: uridnsbl: stopitadictt.xyz . dbl.spamhaus.org -> 127.0.1.2, URIBL_DBL_SPAM, subtest:2130706690-2130706690
Apr  8 19:37:35.330 [9970] dbg: uridnsbl: stopitadictt.xyz . dbl.spamhaus.org -> 127.0.1.2, URIBL_DBL_SPAM, 7f000102 == 7f000102 match
Apr  8 19:37:35.330 [9970] dbg: uridnsbl: domain "stopitadictt.xyz" listed (URIBL_DBL_SPAM): 127.0.1.2
Apr  8 19:37:35.331 [9970] dbg: dns: URIBL_DBL_SPAM lookup finished
It just looks like it just doesn't process the result of the query. Manual queries to RBL's on the system complete fine and disabling the firewall doesn't make a difference either.

I've also tried a number of different DNS servers, including a local resolver, without any result.

Lots of spam gets through the filters due to the non-functioning checks, and more and more customers start complaining, so it is becoming an important issue and I definitely have to get this fixed in the coming days.

If someone wants to take a look on one of the systems, that's no problem. People who want to try and fix it on a paid no-cure-no-pay base are welcome as well!

Evianon
 
Top