paganini MX rejects all

Marco Moock

unread,

Jan 29, 2024, 2:48:12 PM1/29/24

to

Hello!

Currently a dnsbl at paganini is out of control an rejects every
message, regardless from which server.
I dunno if that is an issue at spamhaus, a cache issue or at his site.
At least at this time, 2001:41d0:2:2cb6::1 doesn't run an open resolver.

That is the Posteo outgoing server.

<postm...@bofh.team>: host mail.bofh.team[94.23.43.182] said: 554
5.7.1 Service unavailable; Client host [185.67.36.66] blocked using
zen.spamhaus.org; Error: open resolver;
https://check.spamhaus.org/returnc/pub/2001:41d0:2:2cb6::1/ (in
reply to RCPT TO command)

That is mine
----- The following addresses had permanent fatal errors -----
<use...@bofh.team>
(reason: 554 5.7.1 Service unavailable; Client host
[2a01:170:118f:3::22] blocked using zen.spamhaus.org; Error: open
resolver;
https://check.spamhaus.org/returnc/pub/2001:41d0:2:2cb6::1/)

Both are not running an open resolver, and rather interesting, the IP
of paganini shown in the link doesn't return any problem when querying
the spamhaus website for it.

--
kind regards
Marco

Spam und Werbung bitte an ichwillges...@nirvana.admins.ws

Ivo Gandolfo

unread,

Jan 29, 2024, 4:27:46 PM1/29/24

to

On 29/01/2024 20:48, Marco Moock wrote:
> Both are not running an open resolver, and rather interesting, the IP
> of paganini shown in the link doesn't return any problem when querying
> the spamhaus website for it.
>

Hi Marco,

my server it's protected by zen of SpamHaus, but to use it with
openresolver (Google, Cloudflare, Quad9 etc) need a a key from Spamhaus
itself, but I don't know why today all query reply with 127.0.0.1 key
invalid.

Now I have requested new key to Spamhaus and it's working back.

Sincerely

--
Ivo Gandolfo

Marco Moock

unread,

Jan 30, 2024, 3:10:31 AM1/30/24

to

On 29.01.2024 um 22:27 Uhr Ivo Gandolfo wrote:

> my server it's protected by zen of SpamHaus, but to use it with
> openresolver (Google, Cloudflare, Quad9 etc) need a a key from
> Spamhaus itself, but I don't know why today all query reply with
> 127.0.0.1 key invalid.

Why don't they respond with 127.255.255.254 like it is described in
https://www.spamhaus.org/news/article/788/spamhaus-dnsbl-return-codes-technical-update
?

--
kind regards
Marco

Send spam to muel...@cartoonies.org

Ivo Gandolfo

unread,

Jan 30, 2024, 4:15:54 AM1/30/24

to

-------- Original Message --------
From: Marco Moock <mm+use...@dorfdsl.de>
Date: mar, gen 30 2024 08:10:29AM GMT+00:00
Subject: paganini MX rejects all

> On 29.01.2024 um 22:27 Uhr Ivo Gandolfo wrote:
>
>> my server it's protected by zen of SpamHaus, but to use it with
>> openresolver (Google, Cloudflare, Quad9 etc) need a a key from
>> Spamhaus itself, but I don't know why today all query reply with
>> 127.0.0.1 key invalid.
>
> Why don't they respond with 127.255.255.254 like it is described in
> https://www.spamhaus.org/news/article/788/spamhaus-dnsbl-return-codes-technical-update
> ?
>

Because that's the code that responds when you use zen.spamhaus.org with
an openresolver. I used the host that was provided to me, and if the key
is invalid it responds with that code.

Sincerely

--
Ivo Gandolfo

Ivo Gandolfo

unread,

Jan 30, 2024, 11:04:43 AM1/30/24

to

-------- Original Message --------
From: noel <delet...@invalid.lan>
Date: mar, gen 30 2024 12:47:55PM GMT+00:00
Subject: paganini MX rejects all
>

> The keys are checked every 12 months, if you ignore S/H's emails, they
> end your subscription and invalidate the key - as you found out.
>

I have added zen 6 month ago (and created the account on that date).
That's not the case.

Sincerely

--
Ivo Gandolfo