Author: noel Date: Sun Jul 30 10:30:01 2006 New Revision: 426906 URL: http://svn.apache.org/viewvc?rev=426906&view=rev Log: Added comments regarding DNS RBL, and trailing '.' to ensure that they are treated as absolute domain names.
Modified: james/server/branches/v2.3/src/conf/james-smtphandlerchain.xml james/server/trunk/src/conf/james-config.xml Modified: james/server/branches/v2.3/src/conf/james-smtphandlerchain.xml URL: http://svn.apache.org/viewvc/james/server/branches/v2.3/src/conf/james-smtphandlerchain.xml?rev=426906&r1=426905&r2=426906&view=diff ============================================================================== --- james/server/branches/v2.3/src/conf/james-smtphandlerchain.xml (original) +++ james/server/branches/v2.3/src/conf/james-smtphandlerchain.xml Sun Jul 30 10:30:01 2006 @@ -4,14 +4,38 @@ <handlerchain> <!-- The connect handler configuration --> + + <!-- STOP - before you uncomment out the DNS RBL handler, + please take a moment to review each block list. We + have included some that various JAMES committers use, + but you must decide which, if any, are appropriate + for your environment. The mail servers hosting + @apache.org mailing lists, for example, use a + slightly different list than we have included below. + And it is likely that most JAMES committes also have + slightly different sets of lists. The SpamAssassin + user's list would be one good place to discuss the + measured quality of various block lists. + + NOTA BENE: the domain names, below, are terminated + with '.' to ensure that they are absolute names in + DNS lookups. Under some circumstances, names that + are not explicitly absolute could be treated as + relative names, leading to incorrect results. This + has been observed on *nix and MS-Windows platforms + by users of multiple mail servers, and is not JAMES + specific. If you are unsure what this means for you, + please speak with your local system/network admins. + --> <!-- <handler class="org.apache.james.smtpserver.DNSRBLHandler"> <rblservers> - <whitelist> query.bondedsender.org </whitelist> - <blacklist> sbl-xbl.spamhaus.org </blacklist> - <blacklist> list.dsbl.org </blacklist> - <blacklist> dul.dnsbl.sorbs.net </blacklist> - <blacklist> relays.ordb.org </blacklist> + <whitelist> query.bondedsender.org. </whitelist> + + <blacklist> sbl-xbl.spamhaus.org. </blacklist> + <blacklist> dul.dnsbl.sorbs.net. </blacklist> + <blacklist> list.dsbl.org. </blacklist> + <blacklist> relays.ordb.org. </blacklist> </rblservers> </handler> --> Modified: james/server/trunk/src/conf/james-config.xml URL: http://svn.apache.org/viewvc/james/server/trunk/src/conf/james-config.xml?rev=426906&r1=426905&r2=426906&view=diff ============================================================================== --- james/server/trunk/src/conf/james-config.xml (original) +++ james/server/trunk/src/conf/james-config.xml Sun Jul 30 10:30:01 2006 @@ -934,15 +934,38 @@ <!-- This command handler check against RBL-Lists --> <!-- If getDetail is set to true it try to retrieve information from TXT Record --> <!-- why the ip was blocked. Default to false --> + <!-- STOP - before you uncomment out the DNS RBL handler, + please take a moment to review each block list. We + have included some that various JAMES committers use, + but you must decide which, if any, are appropriate + for your environment. The mail servers hosting + @apache.org mailing lists, for example, use a + slightly different list than we have included below. + And it is likely that most JAMES committes also have + slightly different sets of lists. The SpamAssassin + user's list would be one good place to discuss the + measured quality of various block lists. + + NOTA BENE: the domain names, below, are terminated + with '.' to ensure that they are absolute names in + DNS lookups. Under some circumstances, names that + are not explicitly absolute could be treated as + relative names, leading to incorrect results. This + has been observed on *nix and MS-Windows platforms + by users of multiple mail servers, and is not JAMES + specific. If you are unsure what this means for you, + please speak with your local system/network admins. + --> <!-- <handler class="org.apache.james.smtpserver.core.filter.fastfail.DNSRBLHandler" command="RCPT"> <getDetail> false </getDetail> <rblservers> - <whitelist> query.bondedsender.org </whitelist> - <blacklist> sbl-xbl.spamhaus.org </blacklist> - <blacklist> list.dsbl.org </blacklist> - <blacklist> dul.dnsbl.sorbs.net </blacklist> - <blacklist> relays.ordb.org </blacklist> + <whitelist> query.bondedsender.org. </whitelist> + + <blacklist> sbl-xbl.spamhaus.org. </blacklist> + <blacklist> dul.dnsbl.sorbs.net. </blacklist> + <blacklist> list.dsbl.org. </blacklist> + <blacklist> relays.ordb.org. </blacklist> </rblservers> </handler> --> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]