https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6059





--- Comment #3 from Mark Martinec <[email protected]>  2009-02-05 11:44:16 
PST ---
I don't mind turning it off by default. To make it useful requires use of SQL,
correct trusted_networks settings, absence of blanco whitelisting of own
domain,
and an occasional ditching of records with count of 1, so it should be
enabled only by a conscious decision of administrator aware of issues.

Btw, someone recently reported that a /16 network mask (two octets) for
an IP address in AWL is unfortunate for him, as his /24 netblock happens
to fall under /16 of some ISP (which does not own the complete /16 address
range). Narrowing the range to /24 (three octets) may need to be considered,
and likewise choosing and implemting a suitable mask (/48?) for IPv6 addresses.

I'll still want to use it though: coupled with
auto_whitelist_distinguish_signed
enabled it can be quite effective with domains like gmail.com and yahoo.


-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to