Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-20 Thread Kevin A. McGrail
On 5/19/2017 1:59 PM, David Jones wrote: Would it be beneficial to add a local.cf config option to allow SA to specify a different DNS server rather than what the OS is using in /etc/resolv.conf? I believe there is also an idea in bugzilla to specify this on a per RBL basis. I can't find it

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-19 Thread David Jones
>Would it be beneficial to add a local.cf config option to allow SA to >specify a different DNS server rather than what the OS is using in >/etc/resolv.conf? Nevermind. David Funk just posted about "dns_server" that I wasn't able to find earlier. Seems like setting that would be the best option

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-19 Thread Kris Deugau
David Jones wrote: Would it be beneficial to add a local.cf config option to allow SA to specify a different DNS server rather than what the OS is using in /etc/resolv.conf? IIRC it does, and a quick scan of the Mail::SpamAssassin::Conf man page turned up: dns_server ip-addr-port

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-19 Thread David Jones
>From: Robert Kudyba >> Wiki page updated and simplified. >> https://wiki.apache.org/spamassassin/CachingNameserver >For Fedora, since NetworkMangler (as many are fond to call it) is enabled >by default it might be worthwhile to mention this comment at, but note that

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-19 Thread David B Funk
On Fri, 19 May 2017, John Hardin wrote: On Thu, 18 May 2017, Rob McEwen wrote: In many cases, they explain to me that their settings got auto-overwritten by their hoster - who just HAD to switch their resolv.conf file back to 8.8.8.8 cron. job. Wouldn't the SA config parameter

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-19 Thread John Hardin
On Thu, 18 May 2017, Rob McEwen wrote: In many cases, they explain to me that their settings got auto-overwritten by their hoster - who just HAD to switch their resolv.conf file back to 8.8.8.8 cron. job. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-19 Thread Robert Kudyba
> > Wiki page updated and simplified. > > https://wiki.apache.org/spamassassin/CachingNameserver For Fedora, since NetworkMangler (as many are fond to call it) is enabled by default it might be worthwhile to mention this comment at, but note that /etc/resolv.conf will be managed by

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-19 Thread David Jones
From: Matus UHLAR - fantomas   >On 18.05.17 17:05, Robert Kudyba wrote: >> The link to http://njabl.org/rsync.html is broken at the moment. >njabl.org is dead four (4) years >On 18.05.17 14:39, John Hardin wrote: >>I think this part of the wiki page may not be stressed

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-19 Thread Matus UHLAR - fantomas
On 18.05.17 17:05, Robert Kudyba wrote: The link to http://njabl.org/rsync.html is broken at the moment. njabl.org is dead four (4) years On 18.05.17 14:39, John Hardin wrote: I think this part of the wiki page may not be stressed stongly enough: [...] /* Disable forwarding for DNSBL

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-18 Thread Rob McEwen
On 5/18/2017 5:46 PM, David Jones wrote: it should be pretty clear now to not use a forwarding DNS server locally and do not point the server to another DNS server in /etc/resolv.conf. Thanks David! Some may be interested to know at least 15% of my entire labor "overhead" for running

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-18 Thread Martin Gregorie
On Thu, 2017-05-18 at 21:46 +, David Jones wrote: > > From: John Hardin > > I think this part of the wiki page may not be stressed stongly > > enough: > > Non-forwarding > > If you have a large ISP or are using large public DNS provider(s) > > it is  > > recommended you

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-18 Thread Bill Cole
On 18 May 2017, at 17:05, Robert Kudyba wrote: On May 18, 2017, at 4:41 PM, David Jones wrote: From: Robert Kudyba Am 18.05.2017 um 22:30 schrieb Reindl Harald: "with working dnsmasq" says all - DNSMASQ DON'T DO RECURSION - IT CAN#T you are

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-18 Thread David Jones
>From: John Hardin >I think this part of the wiki page may not be stressed stongly enough: >Non-forwarding >If you have a large ISP or are using large public DNS provider(s) it is >recommended you not forward mail-related DNS traffic through their DNS >servers (though

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-18 Thread John Hardin
On Thu, 18 May 2017, Robert Kudyba wrote: Am 18.05.2017 um 22:30 schrieb Reindl Harald: "with working dnsmasq" says all - DNSMASQ DON'T DO RECURSION - IT CAN#T you are forwarding to some other nameserver and you are not the only one But the nameserver I’m forwarding to is in our

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-18 Thread Robert Kudyba
On May 18, 2017 5:11 PM, "Reindl Harald" wrote: Am 18.05.2017 um 23:05 schrieb Robert Kudyba: > > On May 18, 2017, at 4:41 PM, David Jones djo...@ena.com>> wrote: >> >> From: Robert Kudyba > >>> >> >>

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-18 Thread Robert Kudyba
> On May 18, 2017, at 4:41 PM, David Jones wrote: > >> From: Robert Kudyba > >>> Am 18.05.2017 um 22:30 schrieb Reindl Harald: "with working dnsmasq" says all - DNSMASQ DON'T DO RECURSION - IT CAN#T you are forwarding to some other nameserver and

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-18 Thread David Jones
>From: Robert Kudyba >> Am 18.05.2017 um 22:30 schrieb Reindl Harald: >>> "with working dnsmasq" says all - DNSMASQ DON'T DO RECURSION - IT CAN#T >>> you are forwarding to some other nameserver and you are not the only one >But the nameserver I’m forwarding to is in our

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-18 Thread David Jones
>From: Robert Kudyba >host -tTXT test.uribl.com.multi.uribl.com >test.uribl.com.multi.uribl.com descriptive text "127.0.0.1 -> Query Refused. >See > http://uribl.com/refused.shtml for more information [Your DNS IP: > 74.125.19.15]" >Some logs to show dnsmasq in use: >May

Re: URIBL_BLOCKED on 2 Fedora 25 servers with working dnsmasq, w/ NetworkManager service

2017-05-18 Thread Robert Kudyba
> Am 18.05.2017 um 22:30 schrieb Reindl Harald: >> "with working dnsmasq" says all - DNSMASQ DON'T DO RECURSION - IT CAN#T >> you are forwarding to some other nameserver and you are not the only one But the nameserver I’m forwarding to is in our university. > /etc/resolv.dnsmasq > search