[Users] Errors on official forums

[Barry de Graaff]

I have changed the domain name, also this:

zmprov mcf zimbraMtaPostscreenDnsblReplyMap lmdb:/opt/zimbra/conf/dnsbl-reply

was previously (before today) not documented.


On 03/11/2022 20:43, L Mark Stone wrote:
> Hi Barry,
>
> The Postscreen wiki currently has example entries like 
> <accountkey>.whatever.spamhaus.*org*.
>
> If you have a DQS account, free or paid, you should only be querying 
> <accountkey>.whatever.spamhaus.*net.*
>
> Queries to the .org servers from public resolvers fail now; queries to 
> the .net servers can come from anywhere -- but you have to have a DQS 
> account (free or paid) to query the .net servers.
>
> Mark
>
> *_________________________________________________*
>
> *L. Mark Stone*
>
>
> ------------------------------------------------------------------------
> *From:* Barry de Graaff <info at barrydegraaff.nl>
> *Sent:* Thursday, November 3, 2022 3:19 PM
> *To:* L Mark Stone <lmstone at lmstone.com>
> *Cc:* Tony Publiski <tonster at tonster.com>; users 
> <users at lists.zetalliance.org>
> *Subject:* Re: [Users] Errors on official forums
> For Postfix MTA:
> https://blog.zimbra.com/2022/08/are-you-using-zen-spamhaus-org-or-dbl-spamhaus-org-for-fighting-spam-pay-attention/
>
> For Postscreen, has the same issue:
> https://wiki.zimbra.com/wiki/Zimbra_Collaboration_Postscreen
>
> The blogified version of postscreen is scheduled for January, but is the
> same as the wiki
>
> On 2022-11-03 20:12, L Mark Stone wrote:
> > Hey Team,
> >
> >  I just got off a Zoom call with Spamhaus.  Noah likely hit the nail
> > on the head. Basically, it works like this...
> >
> >  If you are doing lookups to <whatever>.spamhaus._org_, (as we all did
> > for years) that's likely to be a problem.  The .org servers are ONLY
> > for home users and non-profits, and queries that come from the big
> > public resolvers (Google 8.8.8.8 and 8.8.4.4, OpenDNS etc.) are
> > unsuccessful.
> >
> >  The volume of queries in the past few years has increased
> > dramatically, so to better manage their infrastructure and filter out
> > abusers, Spamhaus wants to know who is using their service.
> >
> >  You can still register for a free DQS account (if you qualify), and
> > if you don't, or if you want the extra features, you can get a paid
> > DQS account.  Either way, you'll then have an account key that queries
> > <account key.whatever.spamhaus._net_.
> >
> >  Queries to spamhaus._net_ servers can come from anywhere, even from
> > Google, OpenDNS etc.  But because each query comes with a code,
> > Spamhaus knows who is making the query, and whether a free user is
> > exceeding the limits.
> >
> >  Barry covered this in his blog post a while back.
> >
> >  Bottom Line:
> >
> >        * Register for a DQS account (free or paid).
> >        * Update your config and make sure you are querying 
> spamhaus._net_,
> > not ._org._
> >
> >        *
> >
> >  Hope that helps,
> >  Mark
> >
> > _________________________________________________
> >
> > L. Mark Stone
> >
> > -------------------------
> >
> > From: Barry de Graaff <info at barrydegraaff.nl>
> > Sent: Thursday, November 3, 2022 2:58 PM
> > To: L Mark Stone <lmstone at lmstone.com>
> > Cc: Tony Publiski <tonster at tonster.com>; users
> > <users at lists.zetalliance.org>
> > Subject: Re: [Users] Errors on official forums
> >
> > The result displayed on the forums is the same as what I have seen
> > with
> > legitimate email blocking.
> >
> > Spamhaus just rejects everything and does not do a lookup at all.
> >
> > So it does not matter what your IP is or if it is listed.
> >
> > On 2022-11-03 19:20, L Mark Stone wrote:
> >> What David is experiencing is exactly what I am experiencing trying
> >> to moderate the forums.
> >>
> >>  Similarly, my home office has a static IP. There are no servers
> > here;
> >> nothing that would/could send out email, and a beefy security
> >> appliance on the front door anyway. When the forums say my IP is
> >> listed, the Spamhaus website says otherwise.
> >>
> >>  I've reached out to one of my customers who was experiencing this
> >> yesterday to ask them about their on-prem DNS setup, and their
> > account
> >> status with Spamhaus.
> >>
> >>  I agree Noah's separate email quoting
> >> https://www.spamhaus.org/returnc/pub/ is likely describing the root
> >> cause, but I have a call with Spamhaus Support in 10 minutes so will
> >> post back what I learn.
> >>
> >>  All the best,
> >>  Mark
> >>
> >> _________________________________________________
> >>
> >> L. Mark Stone
> >>
> >> -------------------------
> >>
> >> From: Users <users-bounces at lists.zetalliance.org> on behalf of Tony
> >> Publiski via Users <users at lists.zetalliance.org>
> >> Sent: Thursday, November 3, 2022 12:59 PM
> >> To: Barry de Graaff <info at barrydegraaff.nl>
> >> Cc: users <users at lists.zetalliance.org>
> >> Subject: Re: [Users] Errors on official forums
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zetalliance.org/pipermail/users_lists.zetalliance.org/attachments/20221103/231d6b69/attachment.html>