https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8193

--- Comment #27 from Sidney Markowitz <sid...@sidney.com> ---
After (over)thinking about it some more...

This is a major bug because it causes false negatives in some easily possible
use cases instead of warning messages without false results. What has been
committed so far stops the false negatives once sa-update is run, so the
immediate worst effects have been taken care of.

Reasons to delete the rules from rules/25_dnswl.cf and rules/5_scores.cf

* DNSWL now does not meet our explicit criteria of only supporting in the
default configuration mostly-free dnsbls that do not sent wrong results for
overuse. If we don't support them, we should not have their rules in the
default configuration.

* A site with improperly configured nameserver or high volume with no
subscription that has customized local scores for DNSWL rules but relies on the
rules being already defined will not continue to get false negatives.


Reasons to keep the rules in those files but score them at 0 to disable them

* A properly configured and if-needed paid up site that has customized local
scores for DNSWL rules but relies on the rules being already defined will
continue to work.


My conclusion is to choose the one that more avoids false negatives, which is
to delete the rules, and announce this on the users mailing list to try to
reach people who are properly configured and need to add the rules to their
local configuration.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to