Re: ATTENTION: DNSWL to be disabled by default.

>>>TL;DR: Rather than using an in-band signal of a special reply 
>>>value to queries from blocked users, as do other DNS-Based List 
>>>operators, DNSWL.org sends back a "listed high" response to all 
>>>queries. I was unaware

>On 2024-09-24 at 04:18:06 UTC-0400 (Tue, 24 Sep 2024 10:18:06 +0200) 
>Matthias Leisi <[email protected]> is rumored to have said:
>>Not to all queries. It is sent to resolvers who consistently go 
>>above the limits, sometimes for months and years after receiving the 
>>blocked response.

On 24.09.24 09:13, Bill Cole wrote:
>I don't see how that's significant. The documented policy is directly 
>and intentionally harmful to users.

I understand this case as "abusers" instead of users.

>Doing that is a legitimate choice 
>by a reputation service, but it's not one SA can endorse. The fact 
>that it is enforced by whim rather than mechanically is not a positive 
>factor.

Is there any possibility to detect clients using open DNS, perhaps other 
than RCVD_IN_ZEN_BLOCKED_OPENDNS ?

Then, block all dnsbl/rhsbl rules?


-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux is like a teepee: no Windows, no Gates and an apache inside...