Re: RCVD_IN_VALIDITY_RPBL_BLOCKED

On 2025-05-01 at 16:03:21 UTC-0400 (Thu, 01 May 2025 20:03:21 +0000)
Michael Grant via users <[email protected]>
is rumored to have said:

> I'm seeing this error over and over in my logs over the last few 
> weeks:
>
> spamd: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, 
> creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This 
> means DNSBL blocked you due to too many queries. Set all affected 
> rules score to 0, or use "" to disable queries)
>
> I did try to disable this in root's local.cf but the error continues.

Did you do that in the "global" config at 
/etc/mail/spamassassin/local.cf (or something like it with 'etc' 
somewhere)  or in root's user config in 
/root/.spamassassin/{userprefs,local.cf,whatever} ? If it was the 
latter, you need to move it to the global config.

OR, double-check your config line. it needs to precisely match the 
quoted string. Note that if your mail server is using SpamAssassin via 
the 'spamd' daemon, you should restart spamd after making configuration 
changes. That is also true for milters like MIMEDefang or MailMunge 
which have persistent daemons.

> I am using my own proper bind DNS server running on my host to query, 
> not forwarding requests to Linode or google.  My host is at linode 
> though so I wonder if the ip address of my server I'm in got flagged 
> some other network neighbor or if my spamd really did query too many 
> times.  But after several weeks, the error persists.
>
> Any ideas?  Thanks.

My bet is on one of the issues implied above:

1. "dns_query_restriction deny bl.score.senderscore.com" is in the wrong 
file

2. The config line has a typo

3. Some long-lived process is retaining a stale image of the config



-- 
  Bill Cole
  [email protected] or [email protected]
  (AKA @[email protected] and many *@billmail.scconsult.com 
addresses)
  Not Currently Available For Hire