zen.spamhaus.org - gmail.com blacklisted

[gnulab]

Hi,

Since 31st May till now, many emails originated from gmail are rejected by zen.spamhaus.org .

Jun 6 12:56:54 mg postfix/postscreen[128391]: NOQUEUE: reject: RCPT from [209.85.128.173]:48145: 550 5.7.1 Service unavailable; client [209.85.128.173] blocked using zen.spamhaus.org; from=<USER_A@gmail.com>, to=<USER_B@ptuma.com>, proto=ESMTP, helo=<mail-yw1-f173.google.com>

Has anyone experienced the same thing?

I have to remove zen.spamhaus.org from DNSBL Sites just so the emails can flow through.



Thank you
Henry

 

[Stoiko Ivanov]

please post the other logs for this message (especially the ones from postfix/dnsblog).

Do you maybe have a public dns-resolver configured?
see - https://www.spamhaus.org/faq/section/DNSBL Usage#200

spamhaus limits answers and does not work well with public resolvers...

I hope this helps!

 

[MarekW]

I have the same issue and my syslog shows the following:

Jun 20 13:38:42 mail postfix/dnsblog[9318]: addr 209.85.161.74 listed by domain zen.spamhaus.org as 127.255.255.254

Why does my PMG see the public IP as a local one? I do not get it...

 

[Stoiko Ivanov]

Why does my PMG see the public IP as a local one? I do not get it...

what do you mean - 209.85.161.74 is a public ip address
and 127.255.255.254 is a local-address - but this is way dns block lists work - if something is listed they respond with an ip-address (most commonly one from 127.0.0.0/8)...
127.255.255.254 is the response if you use a public resolver - see the link I pasted above...

I hope this helps!

 

[MarekW]

what do you mean - 209.85.161.74 is a public ip address
and 127.255.255.254 is a local-address - but this is way dns block lists work - if something is listed they respond with an ip-address (most commonly one from 127.0.0.0/8)...
127.255.255.254 is the response if you use a public resolver - see the link I pasted above...

I hope this helps!

I just read the linked article and indeed I am getting the following answer from nslookup

nslookup 2.0.0.127.zen.spamhaus.org
Server:  OPNsense
Address:  192.168.131.1

Non-authoritative answer:
Name:    2.0.0.127.zen.spamhaus.org
Address:  127.255.255.254

So, apparently my dns setup is messed up...