In looking at why some spam is still making it through, it appears that
Pyzor errors block URIBL lookups:
Mar 13 13:15:23.849 [28433] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_SBL_A DNSBL:1.193.124.98:sbl.spamhaus.org
Mar 13 13:15:23.849 [28433] dbg: uridnsbl: complete_dnsbl_lookup URIBL_SBL
DNSBL:1.193.124.98:zen.spamhaus.org
Mar 13 13:15:23.850 [28433] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_SBL_A DNSBL:82.172.235.213:sbl.spamhaus.org
Mar 13 13:15:23.959 [28433] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_RHS_DOB DNSBL:macrotermbed.com:dob.sibl.support-intelligence.net
Mar 13 13:15:24.620 [28433] warn: pyzor: check failed: internal error,
python traceback seen in response
Mar 13 13:15:28.679 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_BLACK DNSBL:macrotermbed.com:multi.uribl.com
Mar 13 13:15:28.679 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_RED DNSBL:macrotermbed.com:multi.uribl.com
Mar 13 13:15:28.679 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_GREY DNSBL:macrotermbed.com:multi.uribl.com
Mar 13 13:15:28.679 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_BLOCKED DNSBL:macrotermbed.com:multi.uribl.com
Mar 13 13:15:28.679 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_DBL_ERROR DNSBL:macrotermbed.com:dbl.spamhaus.org
Mar 13 13:15:28.679 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_DBL_SPAM DNSBL:macrotermbed.com:dbl.spamhaus.org
Mar 13 13:15:28.679 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_DBL_REDIR DNSBL:macrotermbed.com:dbl.spamhaus.org
Mar 13 13:15:28.679 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_PH_SURBL DNSBL:macrotermbed.com:multi.surbl.org
Mar 13 13:15:28.680 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_MW_SURBL DNSBL:macrotermbed.com:multi.surbl.org
Mar 13 13:15:28.680 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_SC_SURBL DNSBL:macrotermbed.com:multi.surbl.org
Mar 13 13:15:28.680 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_JP_SURBL DNSBL:macrotermbed.com:multi.surbl.org
Mar 13 13:15:28.680 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_AB_SURBL DNSBL:macrotermbed.com:multi.surbl.org
Mar 13 13:15:28.680 [28433] dbg: uridnsbl: complete_dnsbl_lookup aborted
URIBL_WS_SURBL DNSBL:macrotermbed.com:multi.surbl.org
This seems like a bug to me. I would expect URIBL lookups to continue,
regardless of the error from python so that proper scoring can be achieved.
Is there anyway to disable this behavior? Should I open a bug? Version is
SA 3.4.0
Thanks,
Quanah
--
Quanah Gibson-Mount
Architect - Server
Zimbra, Inc.
--------------------
Zimbra :: the leader in open source messaging and collaboration