Results 1 to 9 of 9
  1. #1
    Newbie
    Join Date
    Jan 2010
    Posts
    13

    Default Dns_from_ahbl_rhsbl[2.4]

    The Abusive Host Block List has been shutdown as of January 2015.
    See: http://www.ahbl.org/content/last-not...rvices-jan-1st

    Any checks against that get a automatic 2.4 added.

    A large amount of our normal mail is being flagged as spam and dropped by Untangle.
    We use a High Threshold with a drop policy, works well for us.

    Can we modify the list of rbl's for the spam filter or disable this rbl check?

  2. #2
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,486

    Default

    what version of Untangle are you running?
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Newbie
    Join Date
    Jan 2010
    Posts
    13

    Default

    11.0.1, just updated from 10.x yesterday.

    Build: 11.0.1~svn20150105r39394release11.0-1wheezy
    Kernel: 3.2.0-4-untangle-amd64

    2015-01-08 9:14:21 pm
    DNS_FROM_AHBL_RHSBL[2.4] FREEMAIL_FROM[0.0] T_RP_MATCHES_RCVD[-0.0] HTML_MESSAGE[0.0] MIME_HTML_ONLY[1.1] HTML_MIME_NO_HTML_TAG[0.6] T_HK_FAKENAME_MICROSOFT[0.0] TO_NO_BRKTS_HTML_ONLY[0.2] T_TO_NO_BRKTS_FREEMAIL[0.0]
    Last edited by pilcheck; 01-09-2015 at 01:15 PM. Reason: added report example

  4. #4
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,486

    Default

    I would check your basic settings like DNS and verify you are getting updates.

    AHBL was disabled early 2014.
    # find /var/lib/spamassassin/ -type f | xargs grep AHBL
    /var/lib/spamassassin/3.003002/updates_spamassassin_org/50_scores.cf:# AHBL is closing down. disabling early. (Axb-2014-03-28)
    /var/lib/spamassassin/3.003002/updates_spamassassin_org/50_scores.cf:#score DNS_FROM_AHBL_RHSBL 0 2.438 0 2.699 # n=0 n=2

    If you would like help, contact support.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  5. #5
    Newbie
    Join Date
    Jan 2010
    Posts
    13

    Default

    Dirk that was very helpful, thank you.

    I see duplicate entries for spamassasin/3.003001/* and spamassasin/3.003002/*
    Is it safe to remove the old directory?

    Looking at a clean install of 11.0 there is only 3.003002.

    I will reinstall and reboot, thanks for the lead.

  6. #6
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,486

    Default

    Quote Originally Posted by pilcheck View Post
    I see duplicate entries for spamassasin/3.003001/* and spamassasin/3.003002/*
    Is it safe to remove the old directory?
    Sure, but I don't believe that is necessary.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  7. #7
    Untanglit
    Join Date
    Nov 2013
    Posts
    23

    Default

    Quote Originally Posted by dmorris View Post
    I would check your basic settings like DNS and verify you are getting updates.

    AHBL was disabled early 2014.
    # find /var/lib/spamassassin/ -type f | xargs grep AHBL
    /var/lib/spamassassin/3.003002/updates_spamassassin_org/50_scores.cf:# AHBL is closing down. disabling early. (Axb-2014-03-28)
    /var/lib/spamassassin/3.003002/updates_spamassassin_org/50_scores.cf:#score DNS_FROM_AHBL_RHSBL 0 2.438 0 2.699 # n=0 n=2

    If you would like help, contact support.
    I also have the same problem with Untangle 11.0.1. Every message in the spam log is having 2.7 added to it's score from 'DNS_FROM_AHBL_RHSBL'. I've checked the 50_scores.cf file and the lines mentioned above have correctly been updated.

    Any clue as to why incoming emails are still be scored by the AHBL_RHSBL lists that should be disabled?

  8. #8
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,486

    Default

    That means you are not getting spam blocker / spam blocker lite updates.

    That could be for any sort of reason. Usually DNS problems or something upstream filtering internet connectivity.
    One guy had changed the ownership and permissions of /tmp so it couldn't download updates.

    I would contact support.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  9. #9
    Untanglit
    Join Date
    Nov 2013
    Posts
    23

    Default

    Thanks - I'll get with support later on today.

    I guess I'm not sure understand what you mean by not getting the updates? I do have the lines:
    # AHBL is closing down. disabling early. (Axb-2014-03-28)
    #score DNS_FROM_AHBL_RHSBL 0 2.438 0 2.699 # n=0 n=2
    in my 50_scores file.

    I thought that meant I was getting the updates?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2