We got a few hits on RCVD_IN_PBL for the IP 24.137.53.2 that do not appear to be listed on spamhaus. I tried

dig 2.53.137.24.zen.spamhaus.org

on that same server and got no results, and even then SA kept hitting that rule. My understanding of /eval:check_rbl('zen-lastexternal', 'zen.spamhaus.org.', '^127\.0\.0\.1[01]$') /is that it only checks the last IP, am I wrong?

How can I accurately re-create the query done in check_rbl?

Reply via email to