On 24/05/2023 18:57, mick wrote:
Steve Possibly you were using spl/xbl at spamhaus. I used to. See https://www.spamhaus.org/zen/ for the reasons to change.
Hmmm. Deeply perplexing.
the spamhaus check doesn't seem to be checking.
I've tried various configurations but it's not showing up as rejecting anything in my log.
Anyone care to comment on the exim syntax? A or B I've seen examples of both.
A) drop message = REJECTED - ${sender_host_address} is blocklisted dnslists = zen.spamhaus.org
B) drop message = REJECTED - ${sender_host_address} is blocklisted dnslists = zen.spamhaus.org/<;$sender_host_address;$sender_address_domain
Drop or Deny I gather they're similar. Deny logs and doesn't accept; drop does that and forcibly drops the connection, I think.
I've just had a spam email from 239.1.70.111 111.70.1.239.
dig +short TXT 239.1.70.111.zen.spamhaus.org responds "https://www.spamhaus.org/query/ip/111.70.1.239"
showing it's listed and should be dropped.
Or is it simply that it's checking all of the recipients before it gets to the RBL check?
Any thoughts?
Steve