Hardware: VPS bought online (Hetzner) YunoHost version: 11.2.20.2 I have access to my server : Through SSH | through the webadmin Are you in a special context or did you perform some particular tweaking on your YunoHost instance ? : no
Description of my issue
Hello, I run 2 servers which are Hetzner VPS, and a 3rd one which is a OVH VPS.
Since 2 weeks approx. , the diagnosis tool rises an issue on my Hetzner VPS’ (not on the OVH one):
=================================
Email (mail)
=================================
[ERROR] Your IP or domain XXXXXX is blacklisted on SenderScore Blacklist
- The blacklist reason is: "Excessive Number of Queries | https://knowledge.validity.com/hc/en-us/articles/20961730681243"
- After identifying why you are listed and fixing it, feel free to ask for your IP or domain to be removed on https://senderscore.com
Of course I am not spamming anybody, so I don’t understand the “Excessive number of queries” assessment…
I already asked to remove the IP from the blocklist on Senderscore, but it didn’t work.
(BTW senserscore looks like a pay-to-be-in-the- whitelist company who puts everyone on the blocklist by default, I don’t like the feeling of their unblocking process)
Did some people experiment that problem too ? Is it a Hetzner specific issue ? How could I investigate the issue deeper ?
I had the same problem with my server on RPi 4 at home with a VPN.
However, I was able to remove it from the black list. I don’t understand this fault either. I haven’t been blacklisted since.
I also received theses notifications from Yunohost.
I tried to go through the Blocklist Remover but didn’t, because it really looked like a phishing website asking way too much personal info without giving me any sign it was related to a domain or anything…
Notifications are now gone without my intervention.
Got the error in the logs today, again.
During the last two month’s I have seen the same error a few times. The next day Diagnosis results are ok again, so tomorrow will tell for this one.
i receive this notification from the diagnostic today.
Is it a false positive?
It seems i receive and can send mails without problems (of course i didn’t test all mails but some commons domains)
I have also received this warning. In the diagnosis I read : The blacklist reason is: “Excessive Number of Queries | Validity Help Center”
I followed the link and found :
Starting March 1, 2024, Validity will allow up to 10,000 requests to anonymous users over a 30-day period. After 10,000 requests, you must create a MyValidity account to continue using this free service. Upon the creation of a MyValidity account, you will receive continued access to queries.
To avoid excessive queries, Validity recommends avoiding public DNS resolvers. Instead, run a local caching, non-forwarding DNS server as the system resolver on your mail server.
At first I thought it was directly linked somehow to postfix (mail server), but it doesn’t look so. Thus I search for senderscore into yunohost data files and found it in the file /usr/share/yunohost/dnsbl_list.yml
I have no idea what is the purpose of this file, but as it’s only data and looks like a database of services to use to check IP reputation, I just commented out the block about senderscore. Let see if I continue to receive such emails or not.
“Excessive Number of Queries”
What they want is to create an account with them.
A service that is hosted by Amazon and uses Google tag manager… everything you need to trust them
@JfmbLinux same here. Nothing in the diagnostics, yet the email is from diagnostics@myhostname. I only host my own email, which is small, a couple of websites and a nextcloud file sync thing. I hardly have an “Excessive Number of Queries” Sounds like a scam to me.
If I run my domain name through all the “known” DNS and mail checkers, I get a green tick on everything.
Same thing, I use it for Nextcloud, for the synchronization of my files…
I don’t have a website, I installed SearXNG, but I’ve been using it for quite a while and strangely, I have a friend who also has Nextcloud, but not SearXNG and has the same warning emails.
So I don’t think it’s coming from SearXNG.
I really think the issue is best described by @jarod5001 and is due to the fact the check endpoint of senderscore is now behind a fair-use paywall we explode with the yunohost checking process.
As yunohost already check its status through several other services, removing one does not seems to be a problem for me.
Said otherwise: the email we are receiving is NOT about our own server being actually blocked or something. The email just warn us that we are blocked to check whether we are blocked or not ^^
