spamassassin-dev December 2011 archive
Main Archive Page > Month Archives  > spamassassin-dev archives
spamassassin-dev: [Bug 6668] DNSWL is lacking a rule to communic

[Bug 6668] DNSWL is lacking a rule to communicate excessive use to users

From: <bugzilla-daemon_at_nospam>
Date: Sun Dec 11 2011 - 20:59:48 GMT
To: dev@spamassassin.apache.org

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6668

Matthias Leisi <matthias@leisi.net> changed:

           What |Removed |Added
----------------------------------------------------------------------------
                 CC| |matthias@leisi.net

--- Comment #21 from Matthias Leisi <matthias@leisi.net> 2011-12-11 20:59:48 UTC ---
(speaking for dnswl.org)

(In reply to comment #19)
> As noted by Darxus, this is PURPOSEFUL behavior to return true statements for
> what they consider abuse.
>
> "DNSWL announced this behavior here:
> http://www.dnswl.org/news/archives/24-Abusive-use-of-dnswl.org-infrastructure-enforcing-limits.html"

Currently, there following nameservers are getting a "listed, high trust"
answer (plus the reasons for blocking them):

* Google Public DNS servers (multi-million queries per 24 hours, no response
from Google contacts)
* Some big hosting provider resolvers: softlayer.com, dimenoc.com,
theplanet.com, bluehost.com, dyndns.com, netline.net.uk (multi-million queries
per 24 hours, no response/action from abuse@ and similar contacts)
* Five single hosts with multi-million queries per 24 hours with no
response/action from multiple contacts.

The reason for the special result code, as indicated in the posting referenced
above, is that REFUSED rcode will result in triple the amount of queries in
most cases.

This is not used for those doing below one million queries per 24 hours
(aggregated over those IPs that can be identified as belonging to the same
organisation/user).

-- Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug.