<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
Hi Barry,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
The Postscreen wiki currently has example entries like <accountkey>.whatever.spamhaus.<b>org</b>.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
If you have a DQS account, free or paid, you should only be querying <span style="background-color:rgb(255, 255, 255);display:inline !important" class="ContentPasted0">
<accountkey>.whatever.</span>spamhaus.<b>net.</b></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
Queries to the .org servers from public resolvers fail now; queries to the .net servers can come from anywhere -- but you have to have a DQS account (free or paid) to query the .net servers.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
Mark</div>
<div class="elementToProof">
<div id="Signature">
<div>
<div></div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<p style="margin-top:0px; margin-bottom:0px"><strong>_________________________________________________</strong></p>
<p style="margin-top:0px; margin-bottom:0px"><strong>L. Mark Stone</strong></p>
<p style="margin-top:0px; margin-bottom:0px"><br>
</p>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Barry de Graaff <info@barrydegraaff.nl><br>
<b>Sent:</b> Thursday, November 3, 2022 3:19 PM<br>
<b>To:</b> L Mark Stone <lmstone@lmstone.com><br>
<b>Cc:</b> Tony Publiski <tonster@tonster.com>; users <users@lists.zetalliance.org><br>
<b>Subject:</b> Re: [Users] Errors on official forums</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">For Postfix MTA:<br>
<a href="https://blog.zimbra.com/2022/08/are-you-using-zen-spamhaus-org-or-dbl-spamhaus-org-for-fighting-spam-pay-attention/">https://blog.zimbra.com/2022/08/are-you-using-zen-spamhaus-org-or-dbl-spamhaus-org-for-fighting-spam-pay-attention/</a><br>
<br>
For Postscreen, has the same issue:<br>
<a href="https://wiki.zimbra.com/wiki/Zimbra_Collaboration_Postscreen">https://wiki.zimbra.com/wiki/Zimbra_Collaboration_Postscreen</a><br>
<br>
The blogified version of postscreen is scheduled for January, but is the <br>
same as the wiki<br>
<br>
On 2022-11-03 20:12, L Mark Stone wrote:<br>
> Hey Team,<br>
> <br>
> I just got off a Zoom call with Spamhaus. Noah likely hit the nail<br>
> on the head. Basically, it works like this...<br>
> <br>
> If you are doing lookups to <whatever>.spamhaus._org_, (as we all did<br>
> for years) that's likely to be a problem. The .org servers are ONLY<br>
> for home users and non-profits, and queries that come from the big<br>
> public resolvers (Google 8.8.8.8 and 8.8.4.4, OpenDNS etc.) are<br>
> unsuccessful.<br>
> <br>
> The volume of queries in the past few years has increased<br>
> dramatically, so to better manage their infrastructure and filter out<br>
> abusers, Spamhaus wants to know who is using their service.<br>
> <br>
> You can still register for a free DQS account (if you qualify), and<br>
> if you don't, or if you want the extra features, you can get a paid<br>
> DQS account. Either way, you'll then have an account key that queries<br>
> <account key.whatever.spamhaus._net_.<br>
> <br>
> Queries to spamhaus._net_ servers can come from anywhere, even from<br>
> Google, OpenDNS etc. But because each query comes with a code,<br>
> Spamhaus knows who is making the query, and whether a free user is<br>
> exceeding the limits.<br>
> <br>
> Barry covered this in his blog post a while back.<br>
> <br>
> Bottom Line:<br>
> <br>
> * Register for a DQS account (free or paid).<br>
> * Update your config and make sure you are querying spamhaus._net_,<br>
> not ._org._<br>
> <br>
> *<br>
> <br>
> Hope that helps,<br>
> Mark<br>
> <br>
> _________________________________________________<br>
> <br>
> L. Mark Stone<br>
> <br>
> -------------------------<br>
> <br>
> From: Barry de Graaff <info@barrydegraaff.nl><br>
> Sent: Thursday, November 3, 2022 2:58 PM<br>
> To: L Mark Stone <lmstone@lmstone.com><br>
> Cc: Tony Publiski <tonster@tonster.com>; users<br>
> <users@lists.zetalliance.org><br>
> Subject: Re: [Users] Errors on official forums<br>
> <br>
> The result displayed on the forums is the same as what I have seen<br>
> with<br>
> legitimate email blocking.<br>
> <br>
> Spamhaus just rejects everything and does not do a lookup at all.<br>
> <br>
> So it does not matter what your IP is or if it is listed.<br>
> <br>
> On 2022-11-03 19:20, L Mark Stone wrote:<br>
>> What David is experiencing is exactly what I am experiencing trying<br>
>> to moderate the forums.<br>
>> <br>
>> Similarly, my home office has a static IP. There are no servers<br>
> here;<br>
>> nothing that would/could send out email, and a beefy security<br>
>> appliance on the front door anyway. When the forums say my IP is<br>
>> listed, the Spamhaus website says otherwise.<br>
>> <br>
>> I've reached out to one of my customers who was experiencing this<br>
>> yesterday to ask them about their on-prem DNS setup, and their<br>
> account<br>
>> status with Spamhaus.<br>
>> <br>
>> I agree Noah's separate email quoting<br>
>> <a href="https://www.spamhaus.org/returnc/pub/">https://www.spamhaus.org/returnc/pub/</a> is likely describing the root<br>
>> cause, but I have a call with Spamhaus Support in 10 minutes so will<br>
>> post back what I learn.<br>
>> <br>
>> All the best,<br>
>> Mark<br>
>> <br>
>> _________________________________________________<br>
>> <br>
>> L. Mark Stone<br>
>> <br>
>> -------------------------<br>
>> <br>
>> From: Users <users-bounces@lists.zetalliance.org> on behalf of Tony<br>
>> Publiski via Users <users@lists.zetalliance.org><br>
>> Sent: Thursday, November 3, 2022 12:59 PM<br>
>> To: Barry de Graaff <info@barrydegraaff.nl><br>
>> Cc: users <users@lists.zetalliance.org><br>
>> Subject: Re: [Users] Errors on official forums<br>
</div>
</span></font></div>
</body>
</html>