Re: thoughts about a new module called check_spammer_connect

2011-07-29 Thread Charlie Brady
On Thu, 28 Jul 2011, Ask Bjørn Hansen wrote: On Jul 28, 2011, at 11:28, Charlie Brady wrote: I use dnscache on my home network and would like to know why anybody decide to move from dnscache. Performance, Could you supply some details, please? Off the top of my head the

Re: thoughts about a new module called check_spammer_connect

2011-07-28 Thread Ask Bjørn Hansen
On Jul 27, 2011, at 16:41, Aleksandar Lazic wrote: I use dnscache on my home network and would like to know why anybody decide to move from dnscache. Performance, IPv6 support, ease of maintenance (when using dnscache I often end with subtly differently patched versions; frustrating).

Re: thoughts about a new module called check_spammer_connect

2011-07-28 Thread Charlie Brady
On Thu, 28 Jul 2011, Ask Bj?rn Hansen wrote: On Jul 27, 2011, at 16:41, Aleksandar Lazic wrote: I use dnscache on my home network and would like to know why anybody decide to move from dnscache. Performance, Could you supply some details, please? IPv6 support, ease of maintenance

Re: thoughts about a new module called check_spammer_connect

2011-07-28 Thread Ask Bjørn Hansen
On Jul 28, 2011, at 11:28, Charlie Brady wrote: I use dnscache on my home network and would like to know why anybody decide to move from dnscache. Performance, Could you supply some details, please? Off the top of my head the two things I'd run into are the outstanding requests limit

Re: thoughts about a new module called check_spammer_connect

2011-07-28 Thread Chris Lewis
On 7/28/2011 12:09 PM, Chris Lewis wrote: I'd not use dnscache in corporate/enterprise/high reliability environments. Unbound is nice and hiccup-free. Bind9 is reasonable enough. I hear good things about PowerDNS too. As a FYI, on a machine running qpsmtpd, handling up to 10M emails per day,

Re: thoughts about a new module called check_spammer_connect

2011-07-27 Thread Chris Lewis
On 7/26/2011 10:41 PM, Jared Johnson wrote: We discussed doing this once at my organization and someone astutely pointed out that considering that this is DNS, the better solution would really be to run a local caching DNS server, e.g. bind9 and point resolv.conf to 127.0.0.1 with forwarders to

Re: thoughts about a new module called check_spammer_connect

2011-07-27 Thread Matt Sergeant
On Wed, 27 Jul 2011, Jared Johnson wrote: That sounds like a pretty sweet configuration! [Note if you are running qpsmtpd-async, as we do, it's not really possible to route DNS queries differently for DNSBLs versus other DNS queries qpsmtpd does. ParaDNS doesn't handle paralleled DNS queries

Re: thoughts about a new module called check_spammer_connect

2011-07-27 Thread David Nicol
On Wed, Jul 27, 2011 at 2:05 PM, Matt Sergeant m...@sergeant.org wrote: However I'm unlikely to maintain much on Qpsmtpd now that Haraka has taken off. Matt. how about a plugin adapter, so Haraka can use Qpsmtpd plugins or v/v? That probably implies either a node.js -- perl integration layer,

Re: thoughts about a new module called check_spammer_connect

2011-07-27 Thread Matt Sergeant
On Wed, 27 Jul 2011, David Nicol wrote: On Wed, Jul 27, 2011 at 2:05 PM, Matt Sergeant m...@sergeant.org wrote: However I'm unlikely to maintain much on Qpsmtpd now that Haraka has taken off. Matt. how about a plugin adapter, so Haraka can use Qpsmtpd plugins or v/v? That probably implies

Re: thoughts about a new module called check_spammer_connect

2011-07-27 Thread Aleksandar Lazic
Dear Chris, On Mit 27.07.2011 10:59, Chris Lewis wrote: On 7/26/2011 10:41 PM, Jared Johnson wrote: [snipp] Now each of our qpsmtpd instances has their own rbldnsd (serving ~700Mb zone consisting of almost all the DNSBLs we use as one merged zone) plus the Unbound DNS server package. This

thoughts about a new module called check_spammer_connect

2011-07-26 Thread Aleksandar Lazic
Dear list members, I thought about a module which learns from the plugin dnsbl. Maybe we call it check_known_dnsbl_spammer ;-) and use the module http://search.cpan.org/~robm/Cache-FastMmap-1.39/lib/Cache/FastMmap.pm Thoughts: When the dnsbl returns a IP as Spammer add the ip into

Re: thoughts about a new module called check_spammer_connect

2011-07-26 Thread Jared Johnson
I thought about a module which learns from the plugin dnsbl. Maybe we call it check_known_dnsbl_spammer ;-) and use the module http://search.cpan.org/~robm/Cache-FastMmap-1.39/lib/Cache/FastMmap.pm Hi Aleks, We discussed doing this once at my organization and someone astutely pointed out