https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6297

--- Comment #12 from Daryl C. W. O'Shea <[email protected]> 2010-02-24 
01:58:56 UTC ---
(In reply to comment #11)
> nopublish rules for online updates that involve network traffic are
> particularly bad.  The current UPDATE version 912513 contains 22 nopublish
> rules, 14 of which are net rules -- including new DNSBLs like

Ick.  I wasn't aware of this.  I saw a couple of comments via email that said
"I fixed this" but it appears that it wasn't fixed, just worked around for a
single day.

> T_RCVD_IN_NIX_SPAM that result in additional DNS traffic.  Perhaps the
> recommendation should be for sa-update to be disabled until this bug is fixed.

No, please don't promote that people should disable sa-update.  If people do,
we won't be able to get the rules revoked by a subsequent update.

I'm looking into this now.

> As a large site, we keep external DNS traffic to an absolute minimum and rely
> on DNSBLs that are served up locally via rbldnsd to keep reasonable scantimes
> and not flood unsuspecting DNSBLs.

Hmm.  I'm not yet sure how to best handle this.  We want to be able to push out
new DNSBLs via updates, but I completely understand (and live) your situation.

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to