spamhaus.org DQS with Spamassassin

Over recent weeks I have had my email servers rejecting emails from Microsoft servers, because of issues with spamhaus.org

After checking the relevant IPs at check.spamhaus.org and reading about the issue at spamhaus.org I see that this is NOT due to blacklisting but a problem with the set-up on my Centos 7 server

I am advised to use this plugin for Spamassassin: https://github.com/spamhaus/spamassassin-dqs but I see that:

• There are versions for Spamassassin 3.4.1+ and 4.0.0+
• Centos 7's latest build for Spamassassin is 3.4.0, ie the plugin is not compatible

I've had no choice but to turn off spamhaus.org checks following this post … https://support.cpanel.net/hc/en-us/articles/12422318769047-Disable-Spamhaus-RBL-lookups-in-SpamAssassin …, which seems to have stopped the problem

Is there no way to set up Spamassassin to use spamhaus.org normally?

Have you tried ELevat-ing to AlmaLinux 8?

Hello,

Today I got same problem... well one of the clients told me he did not receive any email for a few days..

checked the logs and saw a lot of this

Code: [Select]

Aug 27 09:06:11 srv1 postfix/smtpd[3446]: NOQUEUE: reject: RCPT from something.com[xxx.xxx.xxx.xxx]: 554 5.7.1 Service unavailable; Client host [xxx.xxx.xxx.xxx] blocked using zen.spamhaus.org; Error: open resolver; https://check.spamhaus.org/returnc/pub/2400:cb00:472:1024::ac46:f907/; from=<info@xxxx.net> to=<xxx@xxxx.com> proto=ESMTP helo=<something.com>
After reading some documents online saw they are trying to disable open dns so I did test without google and cloudflare dns servers since I used them. Still could not resolve server and reach zen.spamhaus.org...
Reading more saw they want to control number of connections and queries and so on, so got to this link and  registered but don't have time to test it now. Had to disable zen from postfix conf to my server start working / not rejecting all receiving mails...

https://www.spamhaus.com/resource-center/successfully-accessing-spamhauss-free-block-lists-using-a-public-dns/

well if someone had same problem would be great to share solution...

Best Regards

Sign up for their DQS service, get an API key, and configure it as per their guides. Just a little bit of legwork to use a very good anti-spam tool.

Sign up for their DQS service, get an API key, and configure it as per their guides. Just a little bit of legwork to use a very good anti-spam tool.

I did, gonna test it soon...