Package: mailscanner Version: 4.55.10-2 Severity: wishlist MailScanner is in use at our organization (local goverment, less than 500 mailboxes) and we were contacted (friendly manner, not lawyer) by SpamHaus and notified that we did not qualify for the free DNSRBL service.
Instead, as a government entity, we are required to purchase the data-feed service. The MailScanner configuration files do note that MAPS-RBL is a fee service. Adding a note about the difference between home user and non-home user in the MailScanner.conf and spam.lists.conf files would help corporate/government users stay in SpamHaus' use. (It is not MailScanner's or Debian's responsibility to ensure compliance, but a small hint certainly wouldn't hurt.) Wishlist severity didn't ask for attachments, but the following lines inserted into MailScanner.conf would point out the fee requirement: --- /etc/MailScanner/MailScanner.conf 2006-12-05 07:39:02.000000000 -0900 +++ MailScanner.conf 2006-12-12 10:04:00.000000000 -0900 @@ -1520,6 +1520,10 @@ # See the "Spam List Definitions" file for more information about what # you can put here. # This can also be the filename of a ruleset. +# The SBL+XBL (SpamHaus) lists are NOT FREE for commercial/government +# users. Please see http://www.spamhaus.org/datafeed/faq.lasso and +# http://www.spamhaus.org/organization/funding.html. Note this applies +# to commercial/government networks with less than 500 users. Spam List = # # ORDB-RBL SBL+XBL # You can un-comment this to enable them # This is the list of spam domain blacklists which you are using and in spam.lists.conf: --- /etc/MailScanner/spam.lists.conf 2004-01-05 03:08:41.000000000 -0900 +++ spam.lists.conf 2006-12-12 10:04:39.000000000 -0900 @@ -7,6 +7,10 @@ # If you want to search other DNSBL's you will need to define them here # first, # before referring to them by name in mailscanner.conf (or a rules # file). +# The SBL+XBL (SpamHaus) lists are NOT FREE for commercial/government +# users. Please see http://www.spamhaus.org/datafeed/faq.lasso and +# http://www.spamhaus.org/organization/funding.html. Note this applies +# to commercial/government networks with less than 500 users. ORDB-RBL relays.ordb.org. spamhaus.org sbl.spamhaus.org. Cheers, James -- System Information: Debian Release: 4.0 APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-3-686 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages mailscanner depends on: ii debconf [debconf-2.0] 1.5.8 Debian configuration management sy ii libarchive-zip-perl 1.16-1 Module for manipulation of ZIP arc ii libcompress-zlib-perl 1.42-2 Perl module for creation and manip ii libconvert-binhex-perl 1.119-2 Perl5 module for extracting data f ii libconvert-tnef-perl 0.17-5 Perl module to read TNEF files ii libdbd-sqlite3-perl 1.13-1.1 Perl DBI driver with a self-contai ii libfilesys-df-perl 0.92-1 Module to obtain filesystem disk s ii libhtml-parser-perl 3.55-1 A collection of modules that parse ii libmime-perl 5.420-0.1 Perl5 modules for MIME-compliant m ii libnet-cidr-perl 0.11-1 Manipulate IPv4/IPv6 netblocks in ii libsys-hostname-long-perl 1.4-1 Figure out the long (fully-qualifi ii libsys-syslog-perl 0.18-1 Perl interface to the UNIX syslog( ii perl 5.8.8-6.1 Larry Wall's Practical Extraction ii postfix [mail-transport-agent 2.3.4-3 A high-performance mail transport ii spamassassin 3.1.7-1 Perl-based spam filter using text ii ucf 2.0017 Update Configuration File: preserv ii unzip 5.52-9 De-archiver for .zip files Versions of packages mailscanner recommends: pn tnef <none> (no description available) ii wget 1.10.2-2 retrieves files from the web -- debconf information: mailscanner/v3_upgrade: Don't upgrade