On Thu, Feb 13, 2025 at 04:11:52PM +0100, natan wrote: > I have a couple of servers on all of them with spamassassin3x and I have no > problem > and on one where there is spamassassin4 I have problems as above > > To put it even simpler 90% of traffic is handled by servers with > spamassassin3x where I have no problem > and 10% of traffic goes to spamassassin4.x where the problem is as above
Correlation does not imply causation. I.e. just because one system differs in version of spamassassin from others, does not necessarily mean that spamassassin version is the cause of the problems. For example, there could be other differences which are the actual case of the problem. > I can't make it any simpler > On all servers there is only a local pdns-recursor Just because pdns-recursor is locally installed, does not mean that: 1) it is actually being used (that is why you were asked for the content of your /etc/resolv.conf file) (and which would be me prime suspect). 2) that this pdns-recursor, if it is used, has same version and same configuration as other machines (e.g. cache size, forwarders etc). IOW, it could be behaving differently. 3) just because SA3 does not show you the errors, does not necessarily mean that it does not experience same errors (but for example have errors, but fails to show them) 4) the IP of the problematic server has not been banned previously for SA or other unrelated reasons for overstepping RBLDNS's ToS (and other server IPs do not) 5) the times when you are testing the DNS responses might differ from times when SA is sending the queries (e.g. burst of spams might trigger the overuse of ToS only for some mails). So you should do "spamassassin -D -t" at just before you do the DNS dig. 6) some other reason > dig test.uribl.com.multi.uribl.com txt +short @127.0.0.1 Also, you should leave out "@127.0.0.1" part - you are forcing specific nameserver there, which might not be the one that the system (including SA) is using (and which is usually specified in /etc/resolv.conf "nameserver" stanza, although /etc/nsswitch.conf and others might be overriding that) And I'd suggest also trying (with dig) the *same* DNS query that "spamassassin -D -t" says is failing, instead of looking only at "test.uribl.com.multi.uribl.com" -- Opinions above are GNU-copylefted.
