https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6048

           Summary: URIBL.com tests should be removed from the default
                    SpamAssassin rulesets
           Product: Spamassassin
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Rules
        AssignedTo: [email protected]
        ReportedBy: [email protected]


As URIBL.com are the only blacklist to return *positive* results for *all
queries* when a nameserver has been blocked from querying the list - I think
the rules should be removed from the default rulesets. 

For example - I just brought up a host on Amazon EC2:

[r...@mail ~]# host -t TXT 2.0.0.127.black.uribl.com
2.0.0.127.black.uribl.com descriptive text "174.129.177.176 has been block due
to excessive queries."

Unfortunately I didn't check this first - subsequently I therefore had a score
of 2.206 added to every mail that contained a URI (because all three lists
returned positive) and didn't notice this until I had a load of FPs reported.

For a new or inexperienced SpamAssassin user this would give a bad impression
of the software and will most cause numerous questions to the users lists,
tickets raised here or they might stop using SA altogether.

I understand their reasons for returning positive results (to force people to
use a local cache and/or to pay for use) - however it doesn't make it the right
thing to do particularly when URIBL_BLACK, URIBL_GREY and URIBL_RED are in the
default SpamAssassin rulesets - it should be removed and the end-user should
make the choice to add them in if they want them.

Kind regards,
Steve.


-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to