https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6724

--- Comment #24 from Matthias Leisi <[email protected]> 2011-12-14 08:10:14 
UTC ---
(In reply to comment #17)

> Matthias, if you can decide on a bit (not a bitmask) to return for DNSWL
> blocks, we can add the notification rule.  

As already pointed out in comment #21, we don't return a bitmask, but a
simple/single value in the last octet. 127.0.0.255 is fine.

> And if this moves you to change your decision to implement the purposefully
> wrong DNS response, we can move DNSWL back to default configuration.

SA is not the only user of our public nameserver infrastructure, so there may
still be abusive use of that infrastructure that requires measures above and
beyond SA's _BLOCKED rule.

We will add measures against such situations to the dnswl.org zone to avoid
that certain queries even reach the list.dnswl.org zone nameservers (similar to
what presumably URIBL is doing).

Together, this makes it unlikely that we need to resort back to the
"127.0.10.3" answer ever.

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to