Stewart, John wrote: > I'm wondering why SA is querying this domain at all
[EMAIL PROTECTED] wrote:
The 'ipwhois' zone will be deprecated. It will be an empty zone, using the same NS-set, until 12/31/2004. The "127.0.0.2" test IP will also no longer be included in that zone. On 1/1/2005, the zone will be changed to have an NS of "localhost.rfc-ignorant.org" with an obscenely high TTL.
Hmm, in my copy of SA 3.0.3 an ipwhois rule is present, but commented out with a note saying "disabled since ipwhois is going away." By any chance are you using an older version of SA? If you don't want to upgrade right now, just disable RCVD_IN_RFC_IPWHOIS in local.cf: score RCVD_IN_RFC_IPWHOIS 0 -- Kelson Vibber SpeedGate Communications <www.speed.net>
