How to disable Validity RBL lookups in SpamAssassin

M

Mudgee Host

Member
Proxmox Subscriber
Jan 24, 2021
19
2
23
56
Hi,

Spamassassin uses the validity RBL by default. I am exceeding the 10k limit and have no interesting in subscribing to validity.
Code: 
RCVD_IN_VALIDITY_RPBL_BLOCKED  0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked.  See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.

How do I stop SpamAssassin from querying this RBL?

cpanel has some instructions up, not sure if they translate to proxmox MG or not.
https://support.cpanel.net/hc/en-us...stop-SpamAssassin-from-querying-Validity-RBLs
 
I have same problem RCVD_IN_VALIDITY_CERTIFIED_BLOCKED, RCVD_IN_VALIDITY_RPBL_BLOCKED and RCVD_IN_VALIDITY_SAFE_BLOCKED

pmg pmg-smtp-filter[2598607]: WARNING: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries)
pmg pmg-smtp-filter[2598607]: WARNING: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries)
pmg-smtp-filter[1756808]: WARNING: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries)

so I edited /etc/pmg/templates/local.cf.in

add

dns_query_restriction deny multi.uribl.com
dns_query_restriction deny bl.score.senderscore.com
dns_query_restriction deny sa-accredit.habeas.com
dns_query_restriction deny sa-trusted.bondedsender.org

pmgconfig sync --restart 1
 
Last edited:
AlexHK said:
I believe you have to create a new custom.cf file in /etc/mail/spamassassin/, then add the block to disable your specific RBL there.
Click to expand...

Thanks yes that has worked.
for anyone else wishing to do the same thing

check SpamAssassin is running version 3.4 or greater
Code: 
# spamassassin -V

create / edit the SpamAssassin custom config and add the following lines to it
Code: 
vi /etc/mail/spamassassin/custom.cf
dns_query_restriction deny sa-trusted.bondedsender.org
dns_query_restriction deny sa-accredit.habeas.com
dns_query_restriction deny bl.score.senderscore.com
Click to expand...

restart the filter
Code: 
systemctl restart pmg-smtp-filter
 
  • Like
Reactions: AlexHK
Mudgee Host said:
I signed up at the time but got cold feet when their portal switched from https://my.validity.com/zone/ to https://my.validity.com/ and suddenly it was all about trials and billing.
Click to expand...
This is completly odd. Is it possible you get together free service and 14 days trial for DemandTools?

According to this Article
"Starting March 1, 2024 we will allow up to 10,000 requests per user over a 30-day time period. After 10,000 requests, users must create a MyValidity account to continue using this free service. At this level of usage, we'd simply like to know who you are – there are no fees or purchases required. Upon the creation of a MyValidity account, you will receive continued access to queries (directly or through SpamAssassin).
Click to expand...
Yesterday I registered to this service and I had no notifications about trial and billings.

If you are already registered try out this link https://my.validity.com/zone/settings?tab=account or https://my.validity.com/zone/settings?tab=ip and let me know.
 
itret said:
Is it possible you get together free service and 14 days trial for DemandTools?
Click to expand...

I'm not sure what I did. I was having a good look around. in hindsight I probably just navigated out of the 'zone' site and into the regular one and thats when a trial got launched as I was logged in but without any products

itret said:
If you are already registered try out this link https://my.validity.com/zone/settings?tab=account
Click to expand...

I see the account I setup.

out of interest, while logged in what happens when you go to https://my.validity.com/ ?
 
I figured I'd try and fix this on my setup, as I keep getting:

Code: 
Jul 16 18:12:02 mailfilter pmg-smtp-filter[112488]: WARNING: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_bl.score.senderscore.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny bl.score.senderscore.com" to disable queries)
Jul 16 18:12:02 mailfilter pmg-smtp-filter[112488]: WARNING: check: dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-accredit.habeas.com (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-accredit.habeas.com" to disable queries)
Jul 16 18:12:02 mailfilter pmg-smtp-filter[112488]: WARNING: check: dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating /root/.spamassassin/dnsblock_sa-trusted.bondedsender.org (This means DNSBL blocked you due to too many queries. Set all affected rules score to 0, or use "dns_query_restriction deny sa-trusted.bondedsender.org" to disable queries)

I did try to set up an account with validity.com - added my IP addresses, but still keep getting these errors - likely because its a difference list....
 
You must log in or register to reply here.
Top Bottom