Marco,
The data set in SURBL Multi consists exclusively of domain names and IPv4 addresses. It does not contain any IPv6 addresses.
Multi is primarily for checking links inside emails. Spammers do not generally use IPv6 addresses in links, as not every device used to view emails is IPv6-enabled.
Whether the SMTP traffic happens via IPv6 or IPv4 is not relevant for Multi, as it isn't a list of sender IPs such as Spamhaus SBL.
Joe Wein
SURBL
On 2025-12-05 17:10, Marco Moock wrote:
Hello!
I had some rejects of mail transferred to a system via IPv6 and the remote postmaster told me their rspamd reported the following:
ABUSE_SURBL(5.00){test:email;}, multi.surbl.org https://surbl.org/surbl-analysis IP 2a01:170:118f:3::22 can not be checked (!?) dorfdsl.de is NOT listed
Does surbl support querying IPv6 at all and are there situations where this can lead to an A record response (which will be interpreted as an IP listing)?