URIBL Query Blocked Issue with Local DNS | MDaemon Technologies, Ltd.
  1. Forum
  2. MDaemon
  3. URIBL Query Blocked Issue with Local DNS

URIBL Query Blocked Issue with Local DNS

  • S

    Hello everyone,

    I'm having a problem with URIBL blocking my queries. I'm using a local DNS server, not a public one, but still running into trouble. And we're not dealing with a massive amount of queries here, it's around less than 3000 per day. Despite this, here's what I'm seeing in the log:

    Wed 2023-05-31 13:19:15.055: (SMTP) Spam Filter processing D:\mdaemon\temp\md500100047892.tmp...
    Wed 2023-05-31 13:19:15.055: *  Message return-path: 
    Wed 2023-05-31 13:19:15.055: *  Message ID: 
    Wed 2023-05-31 13:19:15.055: Start SpamAssassin results
    Wed 2023-05-31 13:19:15.055: -99.00 points, 5 required;
    Wed 2023-05-31 13:19:15.055: *  0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
    Wed 2023-05-31 13:19:15.055: *      blocked.  See
    Wed 2023-05-31 13:19:15.055: *      http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
    Wed 2023-05-31 13:19:15.055: *      for more information.
    Wed 2023-05-31 13:19:15.055: *      [URIs: cloudfront.net]

    Has anyone dealt with something similar before? Would appreciate any help or tips.

    Thanks,

    Winston.

    0 likes
  • A

    Have you contacted uribl?  

    There are some tests you can run here that might help figure out what is going on, https://uribl.com/about.shtml.

    You could also disable the lookups in spamassassin for a while and see if you get unblocked.  

    Add this to your local.cf file and then restart MDSpamD.exe.

      score URIBL_BLACK 0
  score URIBL_RED 0
  score URIBL_GREY 0
  score URIBL_BLOCKED 0

    This should disable the lookups in spamassassin and possibly get you unblocked.  

    --
    Arron Caruth

    0 likes
  • S

    Hi Arron,

    Thank you for your advice. I have followed your instructions and it appears that the query request is being blocked from their end due to exceeding a certain limit. I have already reached out to URIBL and registered for the Commercial Datafeed Service. I've received a DNS Hostname: _123456XXX.df.uribl.com. Could you advise me on how to configure this in the MDaemon mail server?

    Thanks,
    Winston

    0 likes
  • A

    You'll need to adjust some rules in spamassassing.  URIBL provides instructions here:

    https://uribl.com/usage.shtml

    Based on what I'm reading it looks like all you should have to do is add the following to your local.cf file in the MDaemon\Spamassassin\rules\ directory.

    urirhssub       URIBL_BLACK  _CUSTID.df.uribl.com.        A   2 
urirhssub       URIBL_GREY   _CUSTID.df.uribl.com.        A   4 
urirhssub       URIBL_RED    _CUSTID.df.uribl.com.        A   8
urirhssub       URIBL_GOLD   _CUSTID.df.uribl.com.        A   16

    When you edit the local.cf file be sure to edit it using a tool such as notepad++, do not use Notepad.

    --
    Arron Caruth

    0 likes
Please login to reply this topic!