You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Axb <ax...@gmail.com> on 2013/03/01 23:52:28 UTC

NJABL is history

As per:

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6913

Just got the bad news:

"Please spread the word.  NJABL has to be shut down effective 
immediately. I just emptied the dnsbl zone files.

My expectation is that the servers will be allowed to run for some time 
so the shutdown can be graceful, but I probably won't have control over 
that and can make no guarantees. "


Rules will be disabled/updated asap.

IMPOrTANT: Please make sure to remove njabl.org entries from your MTA's 
configuration if you have it.

Sorry for the bad news.

Axb


Re: NJABL is history

Posted by John Levine <jo...@taugh.com>.
>I'm assuming this means their feed into Zen and XBL has shut down, too?
>If I'm wrong and that feed still exists, (anyone who knows...) please
>reply to this post with that clarification. (would be interesting to know)

The whole thing is kaput.  The guy who was running it has a new job,
there was nobody left to run it.




Re: NJABL is history

Posted by Rob McEwen <ro...@invaluement.com>.
On 3/1/2013 5:52 PM, Axb wrote:
> "Please spread the word.  NJABL has to be shut down effective
> immediately. I just emptied the dnsbl zone files. 

I'm assuming this means their feed into Zen and XBL has shut down, too?
If I'm wrong and that feed still exists, (anyone who knows...) please
reply to this post with that clarification. (would be interesting to know)

(actually, while NJABL was a great list, I found their listings that
didn't feed into SpamHaus to be the most valuable.... CBL was already
doing the "heavy lifting" for XBL. Many of us will especially miss
NJABL's OTHER non-XBL-related listings!!)

-- 
Rob McEwen
http://dnsbl.invaluement.com/
rob@invaluement.com
+1 (478) 475-9032


Re: NJABL is history

Posted by Axb <ax...@gmail.com>.
On 03/01/2013 11:52 PM, Axb wrote:
> As per:
>
> https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6913
>
> Just got the bad news:
>
> "Please spread the word.  NJABL has to be shut down effective
> immediately. I just emptied the dnsbl zone files.
>
> My expectation is that the servers will be allowed to run for some time
> so the shutdown can be graceful, but I probably won't have control over
> that and can make no guarantees. "
>
>
> Rules will be disabled/updated asap.
>
> IMPORTANT: Please make sure to remove njabl.org entries from your MTA's
> configuration if you have it.
>
> Sorry for the bad news.

Njabl.org rules should be disabled by sa-update on 2013-03-03.
To avoid suprises, please check your systems after next update.

Axb


Re: NJABL is history

Posted by Mark Martinec <Ma...@ijs.si>.
Axb wrote:
> If you're using SA 3.4 trunk:
> as temporary entry in local.cf
> 
> # ONLY FOR SA 3.4 or higher!!!!!!
> dns_query_restriction deny njabl.org

Thanks for reminding us of the new feature!


Wrapped up in a conditional, for those wishing to switch between
versions while keeping the same .cf file:

# Bug 6913, 2013-03-01, NJABL has to be shut down effective immediately
if can(Mail::SpamAssassin::Conf::feature_dns_query_restriction)
  dns_query_restriction deny njabl.org
endif



  Mark

Re: NJABL is history

Posted by Axb <ax...@gmail.com>.
On 03/02/2013 12:25 AM, Kevin A. McGrail wrote:
> On 3/1/2013 6:14 PM, Kevin A. McGrail wrote:
>> score RCVD_IN_NJABL_CGI 0
>> score RCVD_IN_NJABL_MULTI 0
>> score RCVD_IN_NJABL_PROXY 0
>> score RCVD_IN_NJABL_RELAY 0
>> score RCVD_IN_NJABL_SPAM 0
> And score __RCVD_IN_NJABL 0 just in case...

If you're using SA 3.4 trunk:

as temporary entry in local.cf

# ONLY FOR SA 3.4 or higher!!!!!!
dns_query_restriction deny njabl.org



Re: NJABL is history

Posted by Axb <ax...@gmail.com>.
On 03/05/2013 02:01 PM, Matus UHLAR - fantomas wrote:
>>> On 3/1/2013 6:14 PM, Kevin A. McGrail wrote:
>>>> score RCVD_IN_NJABL_CGI 0
>>>> score RCVD_IN_NJABL_MULTI 0
>>>> score RCVD_IN_NJABL_PROXY 0
>>>> score RCVD_IN_NJABL_RELAY 0
>>>> score RCVD_IN_NJABL_SPAM 0
>
>> On Fri, 1 Mar 2013, Kevin A. McGrail wrote:
>>> And score __RCVD_IN_NJABL 0 just in case...
>
> On 04.03.13 10:38, John Hardin wrote:
>> Should this be happening:
>>
>> 72_scores.cf:score RCVD_IN_NJABL_CGI                     0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_NJABL_MULTI                   0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_NJABL_PROXY                   0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_NJABL_RELAY                   0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_NJABL_SPAM                    0.001 0.001
>> 0.001 0.001
>
> hmmm, we don't want to minimalize the impact of these rules but completely
> disable them...
>

hmpf!

I still see some orphan scores due to
/var/lib/spamassassin/3.004000/updates_spamassassin_org/20_dnsbl_tests.cf:reuse 
  RCVD_IN_PBL              RCVD_IN_PBL T_RCVD_IN_PBL_WITH_NJABL_DUL 
RCVD_IN_NJABL_DUL

I removed all NJABL rule references yesterday - we'll need to wait for 
sa-update to catch up with the changes.
(probably after the weekly masscheck on Sat)


Re: NJABL is history

Posted by jdow <jd...@earthlink.net>.
On 2013/03/05 05:09, Axb wrote:
> On 03/05/2013 02:01 PM, Matus UHLAR - fantomas wrote:
>>>> On 3/1/2013 6:14 PM, Kevin A. McGrail wrote:
>>>>> score RCVD_IN_NJABL_CGI 0
>>>>> score RCVD_IN_NJABL_MULTI 0
>>>>> score RCVD_IN_NJABL_PROXY 0
>>>>> score RCVD_IN_NJABL_RELAY 0
>>>>> score RCVD_IN_NJABL_SPAM 0
>>
>>> On Fri, 1 Mar 2013, Kevin A. McGrail wrote:
>>>> And score __RCVD_IN_NJABL 0 just in case...
>>
>> On 04.03.13 10:38, John Hardin wrote:
>>> Should this be happening:
>>>
>>> 72_scores.cf:score RCVD_IN_NJABL_CGI                     0.001 0.001
>>> 0.001 0.001
>>> 72_scores.cf:score RCVD_IN_NJABL_MULTI                   0.001 0.001
>>> 0.001 0.001
>>> 72_scores.cf:score RCVD_IN_NJABL_PROXY                   0.001 0.001
>>> 0.001 0.001
>>> 72_scores.cf:score RCVD_IN_NJABL_RELAY                   0.001 0.001
>>> 0.001 0.001
>>> 72_scores.cf:score RCVD_IN_NJABL_SPAM                    0.001 0.001
>>> 0.001 0.001
>>
>> hmmm, we don't want to minimalize the impact of these rules but completely
>> disable them...
>
>
> pls run sa-update and let us know if there's any NJABL leftovers.

3.003001 is littered with them.

{^_^}

Re: NJABL is history

Posted by Axb <ax...@gmail.com>.
On 03/05/2013 02:01 PM, Matus UHLAR - fantomas wrote:
>>> On 3/1/2013 6:14 PM, Kevin A. McGrail wrote:
>>>> score RCVD_IN_NJABL_CGI 0
>>>> score RCVD_IN_NJABL_MULTI 0
>>>> score RCVD_IN_NJABL_PROXY 0
>>>> score RCVD_IN_NJABL_RELAY 0
>>>> score RCVD_IN_NJABL_SPAM 0
>
>> On Fri, 1 Mar 2013, Kevin A. McGrail wrote:
>>> And score __RCVD_IN_NJABL 0 just in case...
>
> On 04.03.13 10:38, John Hardin wrote:
>> Should this be happening:
>>
>> 72_scores.cf:score RCVD_IN_NJABL_CGI                     0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_NJABL_MULTI                   0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_NJABL_PROXY                   0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_NJABL_RELAY                   0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_NJABL_SPAM                    0.001 0.001
>> 0.001 0.001
>
> hmmm, we don't want to minimalize the impact of these rules but completely
> disable them...


pls run sa-update and let us know if there's any NJABL leftovers.



Re: NJABL is history

Posted by Matus UHLAR - fantomas <uh...@fantomas.sk>.
>>On 3/1/2013 6:14 PM, Kevin A. McGrail wrote:
>>> score RCVD_IN_NJABL_CGI 0
>>> score RCVD_IN_NJABL_MULTI 0
>>> score RCVD_IN_NJABL_PROXY 0
>>> score RCVD_IN_NJABL_RELAY 0
>>> score RCVD_IN_NJABL_SPAM 0

>On Fri, 1 Mar 2013, Kevin A. McGrail wrote:
>>And score __RCVD_IN_NJABL 0 just in case...

On 04.03.13 10:38, John Hardin wrote:
>Should this be happening:
>
>72_scores.cf:score RCVD_IN_NJABL_CGI                     0.001 0.001 0.001 0.001
>72_scores.cf:score RCVD_IN_NJABL_MULTI                   0.001 0.001 0.001 0.001
>72_scores.cf:score RCVD_IN_NJABL_PROXY                   0.001 0.001 0.001 0.001
>72_scores.cf:score RCVD_IN_NJABL_RELAY                   0.001 0.001 0.001 0.001
>72_scores.cf:score RCVD_IN_NJABL_SPAM                    0.001 0.001 0.001 0.001

hmmm, we don't want to minimalize the impact of these rules but completely
disable them...

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Windows found: (R)emove, (E)rase, (D)elete

Re: NJABL is history

Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
On 3/4/2013 5:08 PM, Axb wrote:
> On 03/04/2013 08:32 PM, Kevin A. McGrail wrote:
>> On 3/4/2013 1:38 PM, John Hardin wrote:
>>> On Fri, 1 Mar 2013, Kevin A. McGrail wrote:
>>>
>>>> On 3/1/2013 6:14 PM, Kevin A. McGrail wrote:
>>>>>  score RCVD_IN_NJABL_CGI 0
>>>>>  score RCVD_IN_NJABL_MULTI 0
>>>>>  score RCVD_IN_NJABL_PROXY 0
>>>>>  score RCVD_IN_NJABL_RELAY 0
>>>>>  score RCVD_IN_NJABL_SPAM 0
>>>> And score __RCVD_IN_NJABL 0 just in case...
>>>
>>> Should this be happening:
>>>
>>>
>>> 72_scores.cf:score RCVD_IN_NJABL_CGI                     0.001 0.001
>>> 0.001 0.001
>>> 72_scores.cf:score RCVD_IN_NJABL_MULTI                   0.001 0.001
>>> 0.001 0.001
>>> 72_scores.cf:score RCVD_IN_NJABL_PROXY                   0.001 0.001
>>> 0.001 0.001
>>> 72_scores.cf:score RCVD_IN_NJABL_RELAY                   0.001 0.001
>>> 0.001 0.001
>>> 72_scores.cf:score RCVD_IN_NJABL_SPAM                    0.001 0.001
>>> 0.001 0.001
>>>
>>> ?
>>>
>> No, but are the rules included?  They don't appear to be for me so these
>> are scores for nothing...  Recommend we check after the weekend net 
>> check.
>>
>> I've looked at the code and it appears to be odd.  But there is a lot of
>> stuff related to NJABL to get rid of it once and for all.
>>
>> t/priorities.t has a rule based on NJABL
>>
>> lib/Mail/SpamAssassin/Conf.pm references NJABL
>>
>> rules/20_dnsbl_tests.cf has a reuse line that references NJABL
>>
>> Anything I missed?
>
> Working on removing all references in rules
> Would you take over the  test & .pm parts?
svn commit -m 'small document change to remove NJABL as it is shutdown 
and change to priorities.t to use a different RBL for the priorities 
testing.'
Sending        lib/Mail/SpamAssassin/Conf.pm
Sending        t/priorities.t
Transmitting file data ..
Committed revision 1452876.

-- 
*Kevin A. McGrail*
President

Peregrine Computer Consultants Corporation
3927 Old Lee Highway, Suite 102-C
Fairfax, VA 22030-2422

http://www.pccc.com/

703-359-9700 x50 / 800-823-8402 (Toll-Free)
703-359-8451 (fax)
KMcGrail@PCCC.com <ma...@pccc.com>


Re: NJABL is history

Posted by Axb <ax...@gmail.com>.
On 03/04/2013 08:32 PM, Kevin A. McGrail wrote:
> On 3/4/2013 1:38 PM, John Hardin wrote:
>> On Fri, 1 Mar 2013, Kevin A. McGrail wrote:
>>
>>> On 3/1/2013 6:14 PM, Kevin A. McGrail wrote:
>>>>  score RCVD_IN_NJABL_CGI 0
>>>>  score RCVD_IN_NJABL_MULTI 0
>>>>  score RCVD_IN_NJABL_PROXY 0
>>>>  score RCVD_IN_NJABL_RELAY 0
>>>>  score RCVD_IN_NJABL_SPAM 0
>>> And score __RCVD_IN_NJABL 0 just in case...
>>
>> Should this be happening:
>>
>>
>> 72_scores.cf:score RCVD_IN_NJABL_CGI                     0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_NJABL_MULTI                   0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_NJABL_PROXY                   0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_NJABL_RELAY                   0.001 0.001
>> 0.001 0.001
>> 72_scores.cf:score RCVD_IN_NJABL_SPAM                    0.001 0.001
>> 0.001 0.001
>>
>> ?
>>
> No, but are the rules included?  They don't appear to be for me so these
> are scores for nothing...  Recommend we check after the weekend net check.
>
> I've looked at the code and it appears to be odd.  But there is a lot of
> stuff related to NJABL to get rid of it once and for all.
>
> t/priorities.t has a rule based on NJABL
>
> lib/Mail/SpamAssassin/Conf.pm references NJABL
>
> rules/20_dnsbl_tests.cf has a reuse line that references NJABL
>
> Anything I missed?

Working on removing all references in rules
Would you take over the  test & .pm parts?



Re: NJABL is history

Posted by John Hardin <jh...@impsec.org>.
On Mon, 4 Mar 2013, Kevin A. McGrail wrote:

> On 3/4/2013 1:38 PM, John Hardin wrote:
>>  On Fri, 1 Mar 2013, Kevin A. McGrail wrote:
>> 
>> >  On 3/1/2013 6:14 PM, Kevin A. McGrail wrote:
>> > >   score RCVD_IN_NJABL_CGI 0
>> > >   score RCVD_IN_NJABL_MULTI 0
>> > >   score RCVD_IN_NJABL_PROXY 0
>> > >   score RCVD_IN_NJABL_RELAY 0
>> > >   score RCVD_IN_NJABL_SPAM 0
>> >  And score __RCVD_IN_NJABL 0 just in case...
>>
>>  Should this be happening:
>> 
>>
>>  72_scores.cf:score RCVD_IN_NJABL_CGI                     0.001 0.001 0.001
>>  0.001
>>  72_scores.cf:score RCVD_IN_NJABL_MULTI                   0.001 0.001 0.001
>>  0.001
>>  72_scores.cf:score RCVD_IN_NJABL_PROXY                   0.001 0.001 0.001
>>  0.001
>>  72_scores.cf:score RCVD_IN_NJABL_RELAY                   0.001 0.001 0.001
>>  0.001
>>  72_scores.cf:score RCVD_IN_NJABL_SPAM                    0.001 0.001 0.001
>>  0.001
>>
>>  ?
>
> No, but are the rules included?

They are present but commented out, as are the score lines in 50_scores.cf

> They don't appear to be for me so these are 
> scores for nothing...  Recommend we check after the weekend net check.
>
> I've looked at the code and it appears to be odd.  But there is a lot of 
> stuff related to NJABL to get rid of it once and for all.
>
> t/priorities.t has a rule based on NJABL
>
> lib/Mail/SpamAssassin/Conf.pm references NJABL
>
> rules/20_dnsbl_tests.cf has a reuse line that references NJABL
>
> Anything I missed?

I haven't looked thoroughly, I was just checking the latest update and 
that caught my eye as being odd.

Gross scan:

jhardin@davinci ~/develop/spamassassin/svn/trunk $ make clean
make: *** No rule to make target `clean'.  Stop.
jhardin@davinci ~/develop/spamassassin/svn/trunk $ grep -rl NJABL * | egrep -v '\.(log|svn)'
lib/Mail/SpamAssassin/Conf.pm
rules/70_sandbox.cf
rules/50_scores.cf
rules/STATISTICS-set1.txt
rules/STATISTICS-set3.txt
rules/20_dnsbl_tests.cf
rulesrc/10_force_active.cf
rulesrc/sandbox/khopesh/20_khop_bl.cf
rulesrc/scores/scores-set3
rulesrc/scores/scores-set1
rulesrc/scores/72_scores.cf
t/priorities.t


Looks like Adam has a rule referencing it, too.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Failure to plan ahead on someone else's part does not constitute
   an emergency on my part.                 -- David W. Barts in a.s.r
-----------------------------------------------------------------------
  6 days until Daylight Saving Time begins in U.S. - Spring Forward

Re: NJABL is history

Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
On 3/4/2013 1:38 PM, John Hardin wrote:
> On Fri, 1 Mar 2013, Kevin A. McGrail wrote:
>
>> On 3/1/2013 6:14 PM, Kevin A. McGrail wrote:
>>>  score RCVD_IN_NJABL_CGI 0
>>>  score RCVD_IN_NJABL_MULTI 0
>>>  score RCVD_IN_NJABL_PROXY 0
>>>  score RCVD_IN_NJABL_RELAY 0
>>>  score RCVD_IN_NJABL_SPAM 0
>> And score __RCVD_IN_NJABL 0 just in case...
>
> Should this be happening:
>
>
> 72_scores.cf:score RCVD_IN_NJABL_CGI                     0.001 0.001 
> 0.001 0.001
> 72_scores.cf:score RCVD_IN_NJABL_MULTI                   0.001 0.001 
> 0.001 0.001
> 72_scores.cf:score RCVD_IN_NJABL_PROXY                   0.001 0.001 
> 0.001 0.001
> 72_scores.cf:score RCVD_IN_NJABL_RELAY                   0.001 0.001 
> 0.001 0.001
> 72_scores.cf:score RCVD_IN_NJABL_SPAM                    0.001 0.001 
> 0.001 0.001
>
> ?
>
No, but are the rules included?  They don't appear to be for me so these 
are scores for nothing...  Recommend we check after the weekend net check.

I've looked at the code and it appears to be odd.  But there is a lot of 
stuff related to NJABL to get rid of it once and for all.

t/priorities.t has a rule based on NJABL

lib/Mail/SpamAssassin/Conf.pm references NJABL

rules/20_dnsbl_tests.cf has a reuse line that references NJABL

Anything I missed?

Re: NJABL is history

Posted by John Hardin <jh...@impsec.org>.
On Fri, 1 Mar 2013, Kevin A. McGrail wrote:

> On 3/1/2013 6:14 PM, Kevin A. McGrail wrote:
>>  score RCVD_IN_NJABL_CGI 0
>>  score RCVD_IN_NJABL_MULTI 0
>>  score RCVD_IN_NJABL_PROXY 0
>>  score RCVD_IN_NJABL_RELAY 0
>>  score RCVD_IN_NJABL_SPAM 0
> And score __RCVD_IN_NJABL 0 just in case...

Should this be happening:


72_scores.cf:score RCVD_IN_NJABL_CGI                     0.001 0.001 0.001 0.001
72_scores.cf:score RCVD_IN_NJABL_MULTI                   0.001 0.001 0.001 0.001
72_scores.cf:score RCVD_IN_NJABL_PROXY                   0.001 0.001 0.001 0.001
72_scores.cf:score RCVD_IN_NJABL_RELAY                   0.001 0.001 0.001 0.001
72_scores.cf:score RCVD_IN_NJABL_SPAM                    0.001 0.001 0.001 0.001

?

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Failure to plan ahead on someone else's part does not constitute
   an emergency on my part.                 -- David W. Barts in a.s.r
-----------------------------------------------------------------------
  6 days until Daylight Saving Time begins in U.S. - Spring Forward

Re: NJABL is history

Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
On 3/1/2013 6:14 PM, Kevin A. McGrail wrote:
> score RCVD_IN_NJABL_CGI 0
> score RCVD_IN_NJABL_MULTI 0
> score RCVD_IN_NJABL_PROXY 0
> score RCVD_IN_NJABL_RELAY 0
> score RCVD_IN_NJABL_SPAM 0
And score __RCVD_IN_NJABL 0 just in case...