I then see these links rspamd log wrong, how can I solve?

476 views
Skip to first unread message

ltyb...@gmail.com

unread,
Dec 21, 2016, 11:30:50 PM12/21/16
to rspamd

All organizations can not link, but my dns is normal.

Part of the log:

2016-12-22 12:15:15 #16065(normal) <y5iqcm>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for uribl.spameatingmonkey.net while 'no records with this name' was expected
2016-12-22 12:15:16 #16067(normal) <crtj3k>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for spam.abuse.ch while 'no records with this name' was expected
2016-12-22 12:15:17 #16064(normal) <zp979p>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for bl.ipv6.spameatingmonkey.net while 'no records with this name' was expected
2016-12-22 12:15:17 #16064(normal) <ftsubp>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for sbl.spamhaus.org while 'no records with this name' was expected
2016-12-22 12:15:18 #16065(normal) <6rsaus>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dbl.spamhaus.org while 'no records with this name' was expected
2016-12-22 12:15:19 #16062(normal) <9ownwh>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for multi.uribl.com while 'no records with this name' was expected
2016-12-22 12:15:20 #16064(normal) <mf4ijz>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for rep.mailspike.net while 'no records with this name' was expected
2016-12-22 12:15:20 #16064(normal) <cd3m9g>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for zen.spamhaus.org while 'no records with this name' was expected
2016-12-22 12:15:21 #16065(normal) <crtj3k>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for spam.abuse.ch while 'no records with this name' was expected
2016-12-22 12:15:21 #16064(normal) <thbugu>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for uribl.rambler.ru while 'no records with this name' was expected
2016-12-22 12:15:21 #16062(normal) <thbugu>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for uribl.rambler.ru while 'no records with this name' was expected
2016-12-22 12:15:22 #16063(normal) <b4y1d3>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for bl.score.senderscore.com while 'no records with this name' was expected
2016-12-22 12:15:22 #16068(normal) <6rsaus>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for dbl.spamhaus.org while 'no records with this name' was expected
2016-12-22 12:15:23 #16070(normal) <mf4ijz>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for rep.mailspike.net while 'no records with this name' was expected
2016-12-22 12:15:24 #16062(normal) <y5iqcm>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for uribl.spameatingmonkey.net while 'no records with this name' was expected
2016-12-22 12:15:25 #16067(normal) <b4y1d3>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for bl.score.senderscore.com while 'no records with this name' was expected
2016-12-22 12:15:25 #16066(normal) <thbugu>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for uribl.rambler.ru while 'no records with this name' was expected
2016-12-22 12:15:26 #16068(normal) <mf4ijz>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for rep.mailspike.net while 'no records with this name' was expected
2016-12-22 12:15:27 #16069(normal) <9ownwh>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'no error' for multi.uribl.com while 'no records with this name' was expected

Alexander Moisseev

unread,
Dec 22, 2016, 1:02:56 AM12/22/16
to rsp...@googlegroups.com
On 22.12.16 7:30, ltyb...@gmail.com wrote:
>
> All organizations can not link, but my dns is normal.
>

Check what, for instance, `dig 1.0.0.127.zen.spamhaus.org` returns. It should be NXDOMAIN. If it is anything else then you are likely using service provider's DNS server as a forwarder. Some providers return their error redirection page ip-address instead of NXDOMAIN response.

There are DNS providers that are not redirecting NXDOMAIN responses, but large providers are banned by some RBLs. So you can't use them as well.

You need to use your own recursive DNS server for RBLs lookup.
Message has been deleted

ltyb...@gmail.com

unread,
Dec 22, 2016, 3:08:49 AM12/22/16
to rspamd

Thank you, I try to change the dns on it
But the frequency of inquiries quickly, the normal?



在 2016年12月22日星期四 UTC+8下午2:02:56,Alexander Moisseev写道:

Alexander Moisseev

unread,
Dec 22, 2016, 3:53:52 AM12/22/16
to rsp...@googlegroups.com
On 22.12.16 11:08, ltyb...@gmail.com wrote:
>
> <https://lh3.googleusercontent.com/-u6H-3mh4Z_c/WFuKBu3uuTI/AAAAAAAAAAc/uzEhntF0ueYo7gktNEWuAMNjdGlv5azqwCLcB/s1600/QQ%25E6%2588%25AA%25E5%259B%25BE20161222160744.png>
>
> Thank you, I try to change the dns on it
> But the frequency of inquiries quickly, the normal?
>

Yes, it is normal. Rspamd does a lot of DNS requests (up to 60 per message):

# tail -2000 /var/log/rspamd/rspamd.log | fgrep --color 'dns req: 5'

2016-12-22 08:16:07 #13006(normal) <c1e921>; task; rspamd_task_write_log: id: ... len: 21982, time: 1023.000ms real, 41.679ms virtual, dns req: 58, ...



Reply all
Reply to author
Forward
0 new messages