Herron has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/378697 )

Change subject: Lists: Change zen.spamhaus.org DNSBL action from warn to drop
......................................................................

Lists: Change zen.spamhaus.org DNSBL action from warn to drop

Drop conncetions from IP addresses listed in zen.spamhaus.org DNSBL

Bug: T175878
Change-Id: I92633699cde8bcf1767b6499734712e0951d88ab
---
M modules/profile/templates/exim/exim4.conf.mailman.erb
1 file changed, 3 insertions(+), 5 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/97/378697/1

diff --git a/modules/profile/templates/exim/exim4.conf.mailman.erb 
b/modules/profile/templates/exim/exim4.conf.mailman.erb
index f0a8606..fc5c2c0 100644
--- a/modules/profile/templates/exim/exim4.conf.mailman.erb
+++ b/modules/profile/templates/exim/exim4.conf.mailman.erb
@@ -125,12 +125,10 @@
        # Check whether the sender address domain exists
        require verify = sender
 
-       # Reject messages from IP addresses listed in DNSBL
-       # This is a warn for testing. After testing...
-       #       * Change to delay & drop
-       #       * Change log_message to message
-       warn log_message = $sender_host_address is listed by $dnslist_domain 
($dnslist_value: $dnslist_text)
+       # Drop connections from IP addresses listed in DNSBL
+       drop message = $sender_host_address is listed by $dnslist_domain 
($dnslist_value: $dnslist_text)
                dnslists = zen.spamhaus.org
+               delay 15s
 
        accept
 

-- 
To view, visit https://gerrit.wikimedia.org/r/378697
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I92633699cde8bcf1767b6499734712e0951d88ab
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Herron <kher...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to