Rspamd DBL checks disabled because of the use of an open DNS?

[pagaille (Matthieu Gaillet)]

@pagaille

Therefore I believe that the strategy that was in use since NS7 (using unbound) is not valid anymore and should be replaced by the DQS strategy.

Hi there, happy new year !

I’d like to bump this up, since I believe that this issue is important. I’m curious to know how many of us face this silent DBL_BLOCKED_OPENRESOLVER issue. The interim solution (querying spamhaus through their DQS service) proposed by @mrmarkuz works but doesn’t survive reboots. It should be implemented in a the UI (for the DQS key). Additionally the legacy RBL (BLOCKLIST_DE for instance) should be disabled.

I’m ready to help of course.

[davidep (Davide Principi)]

Hi Matthieu, happy new year!

So far you’re the only one who has reported this issue. As mentioned earlier, at least another Mail installation on Hetzner does not show this behavior, which suggests it may be environment-dependent and not always visible.

That said, I agree the workaround should be persistent. For this reason, we’re including the Spamhaus Rspamd plugin in Mail, allowing manual configuration (DQS) as an alternative to the public DNS-based protocol and ensuring it survives service restarts. Rspamd plugin for Spamhaus DQS · Issue #7801 · NethServer/dev · GitHub