https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6220

--- Comment #12 from Michael Scheidell <[email protected]> 2011-03-23 
12:30:15 EDT ---
(In reply to comment #8)
>
> 
> 127.0.0.255 is a separate issue entirely.  It is FULLY INTENDED for DNSBL's to
> cause false positive hits when you are improperly querying them.  It is the
> ONLY way people will pay attention and fix configuration problems.
> 

then I would suggest that you never enable any rules by default that do this.
even spamhaus just denies your ip.  

when you start to get 10 and 20 min delays in inbound email, you will notice
and then fix it.

actually setting this in a default SA install (even after your testing) could
be considered a premeditated DOS attack, blocking all inbound email (if it
scores > 6 or 7).

I vote you never enable any 'dual purpose' rules like this that punish someone.

on to another note:..   we found that for one or our smaller clients who had a
sonicwall firewall.. those idiot things enable spamhaus rbl by default for all
inbound port 25 connections, even if you don't pay sonicwall for email
filtering.   they didn't do anything about it (didn't block it) but made the
queries.

if these types of dual purpose rules are not disabled by default, the admin can
find himself tracking down issues that are not his fault.

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to