Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: SpamAssassin: users

HEADS UP: DBSL.org is returning positive replies

 

 

SpamAssassin users RSS feed   Index | Next | Previous | View Threaded


axb.lists at gmail

Aug 10, 2012, 4:46 AM

Post #1 of 13 (1232 views)
Permalink
HEADS UP: DBSL.org is returning positive replies

DSBL.org was shut down 4 years ago but apparently there's still ppl
sending lookups.

As of today, dsbl.org is returning positive replies

Enjoy the support case party!

https://twitter.com/#!/search/?q=DSBL&src=typd


Axb


pobox at verysmall

Aug 10, 2012, 9:26 AM

Post #2 of 13 (1168 views)
Permalink
Re: HEADS UP: DBSL.org is returning positive replies [In reply to]

positive or negative?

we had lists.dsbl.org on (obviously forgotten) and about 24 hours ago all mail was rejected, based on lists.dsbl.org - quite unpleasant…

On 10.08.2012, at 13:46, Axb wrote:

> DSBL.org was shut down 4 years ago but apparently there's still ppl sending lookups.
>
> As of today, dsbl.org is returning positive replies
>
> Enjoy the support case party!
>
> https://twitter.com/#!/search/?q=DSBL&src=typd
>
>
> Axb


cedric at gn

Aug 10, 2012, 9:41 AM

Post #3 of 13 (1167 views)
Permalink
Re: HEADS UP: DBSL.org is returning positive replies [In reply to]

On 10/08/12 17:26, Geert Mak wrote:
> positive or negative?
>
> we had lists.dsbl.org on (obviously forgotten) and about 24 hours ago all mail was rejected, based on lists.dsbl.org - quite unpleasant…

Positive. A fair number of servers rejected mail with 554s. It was like:
1.0.0.127.list.dsbl.org has address 74.92.59.67

The registrar removed a delegation
list.dsbl.org. 3600 IN NS stop-using-dsbl.dsbl.org.
which has now been put back in.

Unfortunately people don't seem to notice the open connections and mail
delays from RBL timeouts (to show any in SA, run it with -D flag). So
if you have a really old config, might be worth searching for any
reference to dsbl.org. And removing it, obviously.

>
> On 10.08.2012, at 13:46, Axb wrote:
>
>> DSBL.org was shut down 4 years ago but apparently there's still ppl sending lookups.
>>
>> As of today, dsbl.org is returning positive replies
>>
>> Enjoy the support case party!
>>
>> https://twitter.com/#!/search/?q=DSBL&src=typd
>>
>>
>> Axb

--
All best wishes,

Cedric Knight


brennan at columbia

Aug 10, 2012, 10:36 AM

Post #4 of 13 (1161 views)
Permalink
Re: HEADS UP: DBSL.org is returning positive replies [In reply to]

A user here asked this morning why one of our hosts was "listed", and
I thought, dsbl? isn't that long gone? ... and you know the rest. But
I had to spend a little time checking. At least the web page is still
there with the history of it being shut down in 2008, so I didn't need
to go any further.


Joseph Brennan
Columbia University Information Technology


bgardnermailinglists at gmail

Aug 10, 2012, 1:00 PM

Post #5 of 13 (1164 views)
Permalink
Re: HEADS UP: DBSL.org is returning positive replies [In reply to]

On 08/10/2012 04:46 AM, Axb wrote:
> DSBL.org was shut down 4 years ago but apparently there's still ppl
> sending lookups.
>
> As of today, dsbl.org is returning positive replies
>
> Enjoy the support case party!
>
> https://twitter.com/#!/search/?q=DSBL&src=typd
>
>
> Axb
Is this enough to keep it from being used?

meta RCVD_IN_DSBL (0)


Brent Gardner


darxus at chaosreigns

Aug 10, 2012, 1:29 PM

Post #6 of 13 (1165 views)
Permalink
Re: HEADS UP: DBSL.org is returning positive replies [In reply to]

On 08/10, Brent Gardner wrote:
> >As of today, dsbl.org is returning positive replies

> Is this enough to keep it from being used?
>
> meta RCVD_IN_DSBL (0)

Not necessary, this blacklist is not used in spamassassin because it has
been dead for years.

I believe the warning was posted primarily for people who were using this
BL at their MTA (mail server software). Or possibly ancient versions of SA
(before 3.3.x) which haven't been getting updates for years and you
shouldn't be running anyway.

--
"It is better to die on your feet than to live on your knees."
- Emiliano Zapata, Mexican Revolution Leader
http://www.ChaosReigns.com


biggnou at gmail

Aug 10, 2012, 1:30 PM

Post #7 of 13 (1162 views)
Permalink
Re: HEADS UP: DBSL.org is returning positive replies [In reply to]

Did you meant:

score RCVD_IN_DSBL 0

?

Alex, from prypiat.
Yes, I recycle.


On 12-08-10 04:00 PM, Brent Gardner wrote:
> On 08/10/2012 04:46 AM, Axb wrote:
>> DSBL.org was shut down 4 years ago but apparently there's still ppl
>> sending lookups.
>>
>> As of today, dsbl.org is returning positive replies
>>
>> Enjoy the support case party!
>>
>> https://twitter.com/#!/search/?q=DSBL&src=typd
>>
>>
>> Axb
> Is this enough to keep it from being used?
>
> meta RCVD_IN_DSBL (0)
>
>
> Brent Gardner
>
>


biggnou at gmail

Aug 10, 2012, 1:34 PM

Post #8 of 13 (1169 views)
Permalink
Re: HEADS UP: DBSL.org is returning positive replies [In reply to]

That's right.

Excuse me to use this thread, but I have a short question about scoring.

When I want to prevent a rule from being used, I set it's score to 0:

score RULE 0

Is the method asked by Brent working too?

Alex, from prypiat.
Yes, I recycle.


On 12-08-10 04:29 PM, darxus [at] chaosreigns wrote:
> On 08/10, Brent Gardner wrote:
>>> As of today, dsbl.org is returning positive replies
>> Is this enough to keep it from being used?
>>
>> meta RCVD_IN_DSBL (0)
> Not necessary, this blacklist is not used in spamassassin because it has
> been dead for years.
>
> I believe the warning was posted primarily for people who were using this
> BL at their MTA (mail server software). Or possibly ancient versions of SA
> (before 3.3.x) which haven't been getting updates for years and you
> shouldn't be running anyway.
>


darxus at chaosreigns

Aug 10, 2012, 1:34 PM

Post #9 of 13 (1165 views)
Permalink
Re: HEADS UP: DBSL.org is returning positive replies [In reply to]

For completeness:
http://wiki.apache.org/spamassassin/Rules/RCVD_IN_DSBL
For the last three years this page has mentioned this rule is gone because
dsbl.org is gone.

The bug where it was removed from SA, four years ago:
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5988


The thing to look for and remove is stuff in your MTA configuration, which
I had years ago, in my postfix main.cf:

reject_rbl_client list.dsbl.org

--
"If you believe everything you read, better not read." - Japanese Proverb
http://www.ChaosReigns.com


me at junc

Aug 10, 2012, 1:38 PM

Post #10 of 13 (1165 views)
Permalink
Re: HEADS UP: DBSL.org is returning positive replies [In reply to]

Den 2012-08-10 22:00, Brent Gardner skrev:

> meta RCVD_IN_DSBL (0)

this dnsbl is removed in spamassassin, so where is it in your setup ?


me at junc

Aug 10, 2012, 1:41 PM

Post #11 of 13 (1164 views)
Permalink
Re: HEADS UP: DBSL.org is returning positive replies [In reply to]

Den 2012-08-10 22:30, Alexandre Boyer skrev:

> score RCVD_IN_DSBL 0

upgrade to sa 3.3.2 atleast where this dnsbl is not in


bgardnermailinglists at gmail

Aug 10, 2012, 4:52 PM

Post #12 of 13 (1160 views)
Permalink
Re: HEADS UP: DBSL.org is returning positive replies [In reply to]

On 08/10/2012 01:38 PM, Benny Pedersen wrote:
> Den 2012-08-10 22:00, Brent Gardner skrev:
>
>> meta RCVD_IN_DSBL (0)
>
> this dnsbl is removed in spamassassin, so where is it in your setup ?
>
>
>
Apparently old rules left over after upgrading from 3.2.5. I don't
think they're in use.

Output of 'spamassassin -D -t < message.txt 2>&1' shows no reference to
the old rules.


Brent Gardner


me at junc

Aug 10, 2012, 5:42 PM

Post #13 of 13 (1163 views)
Permalink
Re: HEADS UP: DBSL.org is returning positive replies [In reply to]

Den 2012-08-11 01:52, Brent Gardner skrev:

> Apparently old rules left over after upgrading from 3.2.5. I don't
> think they're in use.

yes this was in 3.2.5, but who is still using it ?

> Output of 'spamassassin -D -t < message.txt 2>&1' shows no reference
> to the old rules.

still remove old rules would be better then make work arounds

SpamAssassin users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.