Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
Date: Fri, 23 Sep 2016 11:30:13 -0700 (PDT)
From: John Hardin <jhardin@impsec.org>
To: users@spamassassin.apache.org
Subject: Re: Spam by IP-address? Spamassassin with geoiplookup?
In-Reply-To: <d221702c-45f7-e404-1d9b-581898696383@rhsoft.net>
Message-ID: <alpine.LNX.2.00.1609231128180.30196@athena.impsec.org>
References: <5eddfcdb-957c-e7c0-b133-a40c7ab371f5@txbweb.de> <48a3e638-4476-4849-3f4c-53aba8eb7887@zeninternet.co.uk> <5885f75b-099a-83fb-1b94-663df4b648b4@txbweb.de> <bd6ec55e-13ad-64ab-d939-9b7cc00d3532@rhsoft.net> <dfca0e75-53b4-b6e7-1a01-fff824f0f7e8@txbweb.de>
 <alpine.LNX.2.00.1609222018410.4306@athena.impsec.org> <d221702c-45f7-e404-1d9b-581898696383@rhsoft.net>
User-Agent: Alpine 2.00 (LNX 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
archived-at: Fri, 23 Sep 2016 18:30:23 -0000

On Fri, 23 Sep 2016, lists@rhsoft.net wrote:

>
>
> Am 23.09.2016 um 05:24 schrieb John Hardin:
>>  On Thu, 22 Sep 2016, Thomas Barth wrote:
>> >  Am 21.09.2016 um 16:13 schrieb lists@rhsoft.net:
>> > > 
>> > >  URIBL_BLOCKED shows you are using still a dns-forwarder and so won't
>> > >  get
>> > >   results from a lot of blacklists
>> > > 
>> > >   fix that - use a local caching resolver with *no forwarding* and 
>> > >   if you are using dnsmasq just don't do that for a inbound 
>> > >   mailserver
>> > 
>> >  I found an instruction here for a debian system
>> > 
>> >  https://manageacloud.com/configuration/local_dns_caching
>> > 
>> >  Seems to work local dns caching but I dont understand why I shouldnt
>> >  use it for inbound mailserver and why I still see URIBL_BLOCKED=0.001
>>
>>  Lists shouldn't have said "caching", that confuses the issue. Caching
>>  and recursion are two different, unrelated pieces.
>
> seriously?

Yes. I have found that when providing advice, if you provide extraneous 
details quite often people will focus on them rather than the important 
points.

> "with *no forwarding*" is not clear enough that one comes two days later with 
> a dnsmasq setup using opendns as forwarders where in fact i said explicit

If they focused on "use a local caching resolver", sure. Obviously.

>>  As far as I understand it, dnsmasq cannot be used for local recursion
>
> yes, and hence in my orginial mail you are party quting i statet don't use 
> that crap, see above

It may need to be restated in a different way to actually be understood.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   One death is a tragedy; thirty is a media sensation;
   a million is a statistic.              -- Joseph Stalin, modernized
-----------------------------------------------------------------------
  276 days since the first successful real return to launch site (SpaceX)