Error in postfix Spamhaus

Cisco30

hello
i noticed errors in the postfix log, i use spamhaus with a free account for DBL lists, here is the log and my spamhaus configuration:

/opt/mailcow-dockerized/data/conf/postfix/extra.cf
the key has been modified..

myhostname = mail.tiboxs.com

smtpd_recipient_restrictions = check_recipient_mx_access proxy:mysql:/opt/postfix/conf/sql/mysql_mbr_access_maps.cf,
  permit_sasl_authenticated,
  permit_mynetworks,
  check_recipient_access proxy:mysql:/opt/postfix/conf/sql/mysql_tls_enforce_in_policy.cf,
  reject_invalid_helo_hostname,
  reject_unauth_destination,
  reject_rhsbl_sender         XXXXXzpivhs5tw4lm.dbl.dq.spamhaus.net=127.0.1.[2..99],
  reject_rhsbl_helo           XXXXXzpivhs5tw4lm.dbl.dq.spamhaus.net=127.0.1.[2..99],
  reject_rhsbl_reverse_client XXXXXzpivhs5tw4lm.dbl.dq.spamhaus.net=127.0.1.[2..99],
  reject_rhsbl_sender         XXXXXzpivhs5tw4lm.zrd.dq.spamhaus.net=127.0.2.[2..24],
  reject_rhsbl_helo           XXXXXzpivhs5tw4lm.zrd.dq.spamhaus.net=127.0.2.[2..24],
  reject_rhsbl_reverse_client XXXXXzpivhs5tw4lm.zrd.dq.spamhaus.net=127.0.2.[2..24],
  reject_rbl_client           XXXXXzpivhs5tw4lm.zen.dq.spamhaus.net=127.0.0.[2..255]

rbl_reply_maps = hash:/opt/postfix/conf/dnsbl-reply-map


tls_high_cipherlist = ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256
tls_preempt_cipherlist = yes

smtp_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtp_tls_ciphers = high
smtp_tls_mandatory_ciphers = high

smtpd_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtpd_tls_ciphers = high
smtpd_tls_mandatory_ciphers = high

/opt/mailcow-dockerized/data/conf/postfix/dnsbl_reply.map
the key has been modified..

# Autogenerated by mailcow, using Spamhaus DQS reply domains
XXXX7zpivhs5tw4lm.sbl.dq.spamhaus.net     sbl.spamhaus.org
XXXX7zpivhs5tw4lm.xbl.dq.spamhaus.net     xbl.spamhaus.org
XXXX7zpivhs5tw4lm.pbl.dq.spamhaus.net     pbl.spamhaus.org
XXXX7zpivhs5tw4lm.zen.dq.spamhaus.net     zen.spamhaus.org
XXXX7zpivhs5tw4lm.dbl.dq.spamhaus.net     dbl.spamhaus.org
XXXX7zpivhs5tw4lm.zrd.dq.spamhaus.net     zrd.spamhaus.org

Spamhaus key is also stored in mailcow.conf
the key has been modified..

# Spamhaus Data Query Service Key
# Optional: Leave empty for none
# Enter your key here if you are using a blocked ASN (OVH, AWS, Cloudflare e.g) for the unregistered Spamhaus Blocklist. 
# If empty, it will completely disable Spamhaus blocklists if it detects that you are running on a server using a blocked AS.
# Otherwise it will work normally.
SPAMHAUS_DQS_KEY=XXXXi7zpivhs5tw4lm

Thank you for your help

DocFraggle

OK, you configured

hash:/opt/postfix/conf/dnsbl-reply-map

But above you showed us the content of dnsbl_reply.map which is a different file

Cisco30

and so this file should be located here, /opt/postfix/conf/dnsbl-reply-map , but I have nothing
I used this post for the spamhaus setup
https://community.mailcow.email/d/2854-need-help-setting-up-spamhaus/9

DocFraggle

You have to create the file yourself, see https://community.mailcow.email/d/2675-spamhaus-config/36 (german, but that’s what your link was based on)

Cisco30

hi
i tried to help me with https://community.mailcow.email/d/2675-spamhaus-config/36 but i still have an error, postfix asks for a file that ends with “db” which is this one “dnsbl-reply-map.db”
i created a file “dnsbl-reply-map”

dnsbl-reply-map contains this inside:

XXX.zen.dq.spamhaus.net=127.0.0.[2..11]	554 $rbl_class $rbl_what blocked using ZEN - see https://www.spamhaus.org/query/ip/$client_address for details
XXX.dbl.dq.spamhaus.net=127.0.1.[2..99]	554 $rbl_class $rbl_what blocked using DBL - see $rbl_txt for details
XXX.zrd.dq.spamhaus.net=127.0.2.[2..24]	554 $rbl_class $rbl_what blocked using ZRD - domain too young
XXX.zen.dq.spamhaus.net			554 $rbl_class $rbl_what blocked using ZEN - see https://www.spamhaus.org/query/ip/$client_address for details
XXX.dbl.dq.spamhaus.net			554 $rbl_class $rbl_what blocked using DBL - see $rbl_txt for details
XXX.zrd.dq.spamhaus.net			554 $rbl_class $rbl_what blocked using ZRD - domain too young

but I still have this error:

postfix asks for a file that ends with .db

DocFraggle

Yes, you have to run postmap inside the postfix container

cd /opt/mailcow-dockerized
docker compose exec postfix-mailcow /bin/bash

then:

root@0abec58b1f99:/# cd /opt/postfix/conf/
root@0abec58b1f99:/opt/postfix/conf# postmap dnsbl-reply-map

This will create the file “dnsbl-reply-map.db”

Cisco30

Thank you for your help DocFraggle there is no more error, I had to run the previous commands to create the file “dnsbl-reply-map.db”