Re: What IP is used for the validity plugin?

On 2026-04-10 at 10:37:56 UTC-0400 (Fri, 10 Apr 2026 16:37:56 +0200)
Matus UHLAR - fantomas <[email protected]>
is rumored to have said:

>> On 2026-04-10 03:25:48 +0200, Vincent Lefevre wrote:
>>> I've now done
>>>
>>>   systemctl enable --now spamassassin-maintenance.timer
>>>
>>> which should solve the issue in a few hours.
>
> On 10.04.26 13:24, Vincent Lefevre wrote:
>> I confirm: I now get the score 0.0 for each 
>> RCVD_IN_VALIDITY_*_BLOCKED
>> rule.
>>
>> However, I still get
>>
>> Apr 10 13:12:53 qaa spamd[142607]: check: dns_block_rule 
>> RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating 
>> /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means 
>> DNSBL blocked you due to too many queries. Set all affected rules 
>> score to 0, or use "dns_query_restriction deny 
>> sa-trusted.bondedsender.org" to disable queries)
>> Apr 10 13:12:53 qaa spamd[142607]: check: dns_block_rule 
>> RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating 
>> /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL 
>> blocked you due to too many queries. Set all affected rules score to 
>> 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to 
>> disable queries)
>> Apr 10 13:12:53 qaa spamd[142607]: check: dns_block_rule 
>> RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating 
>> /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means 
>> DNSBL blocked you due to too many queries. Set all affected rules 
>> score to 0, or use "dns_query_restriction deny 
>> bl.score.senderscore.com" to disable queries)
>>
>> in the logs. Shouldn't these queries be disabled by default in the
>> future SpamAssassin versions?
>
> yes, they should, but seems thata they were forgotten

Rather, not all references were chased, I think. John H. has some 
sub-rules (unscored) structured as meta-rules in his sandbox referencing 
VALIDITY rules, and even though these are set to "nopublish" they are in 
the svn tree and I suspect that they are forcing others back into 
inclusion in the rule distribution and without scores, they default to 
1.

I have committed r1932968, which explicitly forces the BLOCKED rules to 
absolute zero as well.

-- 
  Bill Cole
  [email protected] or [email protected]
  (AKA @[email protected] and many *@billmail.scconsult.com 
addresses)
  Please keep discussion mailing list replies *on-list*
  Not Currently Available For Hire