natan <na...@epf.pl> writes: > Feb 13 11:48:14 amavis5 amavis[934307]: (934307-01) SA info: async: > aborting after 4.815 s, deadline shrunk: URIBL, > A/kra20at.cc.multi.surbl.org, rules: URIBL_ABUSE_SURBL, > URIBL_CR_SURBL, URIBL_MW_SURBL, URIBL_DM_SURBL, URIBL_PH_SURBL, > SURBL_BLOCKED, URIBL_CT_SURBL
This can sometimes happen from short circuiting. > or: > Feb 13 11:50:40 amavis5 amavis[939452]: (939452-01) _WARN: check: > dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED hit, creating > /var/amavis/var/.spamassassin/dnsblock_sa-trusted.bondedsender.org > (This means DNSBL blocked you due to too many queries. Set all > affected rules score to 0, or use "dns_query_restriction deny > sa-trusted.bondedsender.org" to disable queries) It seems you are seeing this on multiple RBLs. It is highly likely you are using a shared resolver. https://cwiki.apache.org/confluence/display/SPAMASSASSIN/CachingNameserver