On 20.07.2008 16:18 CE(S)T, Yet Another Ninja wrote:
This could be a DNS problem returning a .2 (positive response) for all queries.
I have done some further tests and it seems that one of the four nameservers (the .100.100) sometimes returns NXDOMAIN and sometimes 127.0.0.255, which obviously is bogus because URIBL says on their website that they only return .14 or the single bits of it. The fact that it only returned .255 sometimes (not always) could explain that so few of my incoming e-mails had this rule matched. I didn't count them but I feel like I received more than 13 messages in three weeks (excluding mailing lists) that contained URIs and thus have been put through the URIBL rules.
The other three nameservers didn't show this misbehaviour in a few short tests. So I moved the .100.100 to the end of resolv.conf and enabled the rules in SpamAssassin again. Let's see what will happen.
-- Yves Goergen "LonelyPixel" <[EMAIL PROTECTED]> Visit my web laboratory at http://beta.unclassified.de