Justin Mason wrote: > Theo Van Dinter writes: > >> On Thu, Sep 06, 2007 at 08:29:24AM -0400, Matt Kettler wrote: >> >>> I don't think the intent was to allow <the_world>, merely <the_committers>. >>> >> If the idea is to help people doing the weekly/net runs, then it's not >> <the_committers>, it's <anyone_who_does_the_weekly/net_runs>. >> >> And that list is an open-ended list of anyone who asks to do it. Most of >> whom >> probably don't have static IPs, which means either keeping the ACL updated >> limiting access, or opening to <the_world> or some subset thereof. >> > > in my opinion, it's a dead-end anyway; we probably shouldn't be > considering a *BL which can't handle that kind of query volume, since they > won't be able to survive deployment in a SpamAssassin release. > > The problem isn't that they can't handle the volume.. We're talking specifically about Spamhaus, they can easily handle the load... It's a problem of "will they allow the volume for free".
The problem is that Spamhaus currently auto-blacklists IPs with high rate-of-query.. this will likely cause the folks doing weekly/net runs to get blacklisted unless they buy a datafeed from spamhaus. However, if we drop SBL/XBL/PBL from SpamAssassin's default rules, which we probably should do, we'll be fine. See also: http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5641
