http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5476





------- Additional Comments From [EMAIL PROTECTED]  2007-08-28 16:29 -------
(In reply to comment #6)
> hey Tom, just getting around to this. :(
> 
> (In reply to comment #3)
> > Also, it seems that in our case, the scoring may have to be additive.
> > Currently an IP address that meets our COI standards is published in
> > both zones, the plus.bondedsender.org zone for COI IP addresses, and the
> > query.bondedsender.org zone for all qualifying member IP addresses.  The
> > query.bondedsender.org zone is the same as the two you query, sa-trusted
> > and sa-other.bondedsender.org.
> > 
> > So would it be proper to simply add an additional -3.7 for a positive on
> > plus.bondedsender.org to the -4.3 default on a positive
> > sa-trusted.bondedsender.org check?  
> 
> ok, that works, and makes sense.

Great.  One down.  :)

> 
> > Not sure what you want to do on the sa-other if that IP is a COI IP or not.
> 
> Best to ignore it entirely, and make the COI lookup similar to BSP_TRUSTED;
> it only applies to the external-to-internal "firsttrusted" handover. (Any
> Received headers after that point are trivially forged, which is why BSP_OTHER
> has such a miniscule score; it's purely informational.)

This makes sense too.  Two down.

> 
> > > I'm not 100% sure about changing the names of the existing rules to
> > > RCVD_IN_SSC_* though, since people may have local customisations (score
changes
> > > etc.) hmm.
> > 
> > Good point.  It is actually the same reason we've not changed the zone
> > names on our side.  I suppose there is no precedent in SA then for
> > renaming a rule?  
> 
> There is, but it's exceptionally painful, esp for users, so we avoid it if at
> all possible.  Changing rule description strings, on the other hand, is easy.

That all makes sense.  I've reviewed the attachement here:

http://issues.apache.org/SpamAssassin/attachment.cgi?id=4095

and this all looks great as is.

> More questions:
> 
> - are there test IP addresses in plus.bondedsender.org.?   I can't seem
>   to find any.

127.0.0.2 wasn't in the plus zone so I've added it and you should be able to
test.  Sorry about that.

> 
> - also, is there tech documentation on that zone (query using TXT/A lookups,
>   result formats, etc.)?
>

There is some though it probably needs updating.  If you have any input on
instructions for SA 3.2 that would be great.  Let me know questions either way:

http://www.senderscorecertified.org/senderscorecertified/technical.php

Let me know how else I can help.  When do you think 3.2.4 and 3.3 will be 
released?

Thanks!

Tom




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to