On Thu, 23 Jan 2020 13:06:01 +0000 Jonathan Gilpin wrote: > Hi, > > It seems that SpamAsassin is giving out a false positive on a > Spamhaus SBL lookup: > > * 0.1 URIBL_SBL_A Contains URL's A record listed in the > Spamhaus SBL
I'm not seeing this at present. > * blocklist > * [URIs: fluent.ltd.uk] > * 2.1 URIBL_SBL Contains an URL's NS IP listed in the > Spamhaus SBL > * blocklist > * [URIs: fluent.ltd.uk] I did see this. > fluent.ltd.uk has address 195.78.94.252 > > Name servers: > dns1.fluent.ltd.uk 195.78.94.253 > dns2.fluent.ltd.uk 195.78.94.254 These two are supplied by the ltd.uk nameservers, but if you do an NS lookup on one of these you get a third server, dns3.fluent.ltd.uk with the IP address 195.78.94.20. This is listed in SBL.
