On Sat, 4 Aug 2012, Michael Scheidell wrote:
On 8/4/12 8:53 AM, Axb wrote:
On 08/04/2012 11:16 AM, Alessio Cecchi wrote:
Hi,
we are using zen.spamhaus.org and psbl.surriel.com DNSBL at MTA level
(qmail + rblsmtpd) so we would like to disable this check in
spamassassin. So we added this in local.cf:
and, since DNS is cached anyway, why bother disabling them?
(oh, and I have seen similar rules show up in SA scores even through we
blocked using other dns bls'. why they didn't get blocked in mta is sometimes
a mystery.. or has to do with slow dns servers, finally answering)
and, as Axb said, you could mess up meta rules.
Another reason for not disabling "redundant" DNSBL checks in SA is if
your mail system structure is such that you sometimes have MX servers
ahead of your normal incoming gateway then SA can "look thru" those MX
servers and apply the DNSBL checks eventho the bad-boy servers aren't
directly handing your server messages. (this depends upon having
"trusted_networks" configured correctly).
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
