today it seems like the RBL Pattern is broken, some E-Mails are getting blocked who are not on the Blacklist.
We are seeing the same thing with multiple customers.
The log says that IPs are blocked due to an RBL entry with cbl.abuseat.org or sbl-xbl.spamhaus.org and rejects the mail. But when you check with the…
Is the problem "Rejected: RBL (cbl.abuseat.org)" solved?
When can activate the RBL
it isn't. Had the problem with a host in germany. The rbl list was fur.global.sophosxl.com. After disabling the Recommended RBLs Option mails from this host went in quarantine, but we were able to receive mails.
Problem is not solved, Sophos has to honor new return Codes from spamhaus, and has to make sure limits are not exceeded and make sure public DNS is not used for cbl.abuseat.org.
fur.global.sophosxl.com should not be affected, cause it is sophos rbl.
A System on this list might be a spammer.
Astaro user since 2001 - Astaro/Sophos Partner since 2008
It isn't, since the IP isn't on any blacklists and an nslookup of the IP against fur.global.sophosxl.com gets an nxdomain back. The sophos online check also lists that ip green (ok).
Than the IP is not longer blocked,
It's ok. I disable the Recommended RBL option and the mailflow continues. Don't know which bug it's this time.