This system would result in one query per BL per SA restart, or per
ruleset reload or per hour or whatever, rather than one or more
queries per processed message. That's a step forward to DNSBL
operators, but more importantly, it would avoid the situation where
users are negatively impacted by BL failures.
Definitely on the same page. My thoughts are to build on the block
notification rules to implement code that blocks the DNSBL queries for 1
hour. However, that's kind of a phase II. And since I doubt there will
be consensus from DNSBL operators, it'll really be a one off thing per
DNSBL to implement unless some alignment of planets occurs that I doubt
is even in motion ;-)
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6724
Regards,
KAM