Page 1 of 1

Emails rejected due to SpamHaus blacklist (zen.spamhaus.org)

Posted: Wed Feb 26, 2025 9:43 pm
by webxtek
Hi everyone,

Since yesterday, several users on my server have been complaining that they can't receive emails, although sending works fine.

After checking, Exim4 seems to be running normally. However, when I checked the mainlog, I found multiple messages like this:

Code: Select all

2025-02-26 20:36:53 H=mail-ej1-f41.google.com [209.85.218.41] X=TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.218.41 is in a black list at zen.spamhaus.org
I manually checked, and none of these IPs appear to be blacklisted. However, every single incoming email is being filtered as blacklisted.

Is anyone else facing this issue since yesterday?
What can I do to fix it?

Thanks!

Re: black list at zen.spamhaus.org

Posted: Wed Feb 26, 2025 10:08 pm
by webxtek
Screenshot 2025-02-26 210511.png
Screenshot 2025-02-26 210511.png (6.79 KiB)
I just commented out both lines in /etc/exim4/dnsbl.conf, and that solved the issue, but it’s not an ideal fix. I’m not sure what changed to cause this behavior. Any suggestions are welcome—thank you very much! :D

Re: black list at zen.spamhaus.org

Posted: Thu Feb 27, 2025 4:54 pm
by isscbta
If you see this or a similar entry in the Exim log, it means your server is affected by the issue:

Code: Select all

2025-02-26 17:19:11 H=mail-lf1-f48.google.com [123.123.123.123] X=TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128 CV=no F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 123.123.123.123 is in a black list at zen.spamhaus.org
SpamHaus has unexpectedly and without clear explanation decided to blacklist numerous IP addresses, including entire IP ranges. Since MyVesta, by default, uses their blacklist for filtering, this has caused issues with email delivery.

Until this issue is resolved at a higher level, you can temporarily bypass the SpamHaus filter by running the following command:

Code: Select all

sed -i '/zen.spamhaus.org/d' /etc/exim4/dnsbl.conf
This will disable filtering through SpamHaus, allowing emails to be sent normally.

Re: Emails rejected due to SpamHaus blacklist (zen.spamhaus.org)

Posted: Fri Feb 28, 2025 12:02 pm
by isscbta
Update:

We've released myVesta update - Version 0.9.9-0-12 [28-Feb-2025].
The update will remove SpamHaus DNSBL from exim4.

Re: Emails rejected due to SpamHaus blacklist (zen.spamhaus.org)

Posted: Sun Mar 02, 2025 10:23 am
by T4B
hey i want to know if this removed from myvestacp it is bad for emails ? or safe to remove it and move forward ?

Re: Emails rejected due to SpamHaus blacklist (zen.spamhaus.org)

Posted: Tue Mar 18, 2025 12:06 am
by webxtek
isscbta wrote: Fri Feb 28, 2025 12:02 pm Update:

We've released myVesta update - Version 0.9.9-0-12 [28-Feb-2025].
The update will remove SpamHaus DNSBL from exim4.
awesome thanks