Mailing List Archive: Enforcing of new return codes for Spamhaus RBLs

Enforcing of new return codes for Spamhaus RBLs

Feb 12, 2021, 6:56 AM

Post #1 of 3 (284 views)

Hello everyone,

this is just a friendly heads up for everyone using our RBLs through the
public mirrors. Beginning in March Spamhaus will start to enforce the
return codes for these three new conditions announced in late 2019:

127.255.255.252 - Typing error in DNSBL Name
127.255.255.254 - Query via public/open resolver/generic unattributable rDNS
127.255.255.255 - Excessive Number of Queries

SpamAssassin already has the codes in it's ruleset, so there is nothing
really to do except check the logs in March to see that your are not
hitting on any on them.

Please see the article at
https://www.spamhaus.org/news/article/807/using-our-public-mirrors-check-your-return-codes-now
for more informations

--
Best regards,
Riccardo Alfieri

Spamhaus Technology
https://www.spamhaustech.com/

Re: Enforcing of new return codes for Spamhaus RBLs [ In reply to ]

rwmaillists at googlemail

Feb 14, 2021, 7:09 AM

Post #2 of 3 (283 views)

Permalink

On Fri, 12 Feb 2021 14:56:58 +0000
Riccardo Alfieri wrote:

> 127.255.255.254 - Query via public/open resolver/generic
> unattributable rDNS

What does "generic unattributable rDNS" mean?

I presume it will block me because I'm querying through a VPN with no
rDNS for the shared egress IP address.

If I have the queries bypass the VPN, will it also block me for having
ISP dynamic pool rDNS.

Re: Enforcing of new return codes for Spamhaus RBLs [ In reply to ]

riccardo.alfieri at spamteq

Feb 15, 2021, 6:09 AM

Post #3 of 3 (281 views)

Permalink

On 14/02/21 16:09, RW wrote:

>
> What does "generic unattributable rDNS" mean?
>
> I presume it will block me because I'm querying through a VPN with no
> rDNS for the shared egress IP address.
>
> If I have the queries bypass the VPN, will it also block me for having
> ISP dynamic pool rDNS.

Hello RW,

you are correct. That return code will be triggered if Spamhaus is
unable to identify who is the original querier, and with a VPN endpoint
that is most likely the case.

If you still need to do queries over VPN, then you can simply subscribe
for a free DQS account, as DQS accounts are not blocked in any way,
except if you go over quota.

--
Best regards,
Riccardo Alfieri

Spamhaus Technology
https://www.spamhaustech.com/