You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by David B Funk <db...@engineering.uiowa.edu> on 2008/10/07 23:22:56 UTC

DNS_FROM_SECURITYSAGE broken?

I recently noticed that DNS_FROM_SECURITYSAGE was hitting everything.

A quick check revealed:

 # host hp.com.blackhole.securitysage.com.
 hp.com.blackhole.securitysage.com has address 127.0.0.1
 # host blackhole.securitysage.com.
 blackhole.securitysage.com has address 127.0.0.1
 # host securitysage.com.
 securitysage.com has address 127.0.0.1

So it appears that their DNS is totally broken. they've
been seriously hijacked, or they've pulled an ordb.org.

Attempts to contact them havn't worked.

Anybody know what's going on?

-- 
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{

Re: DNS_FROM_SECURITYSAGE broken?

Posted by Kai Schaetzl <ma...@conactive.com>.
Sm wrote on Tue, 07 Oct 2008 16:03:57 -0700:

> http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5672

so, if you (OP) were using sa-update you wouldn't have even noticed ;-)

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com




Re: DNS_FROM_SECURITYSAGE broken?

Posted by SM <sm...@resistor.net>.
At 14:22 07-10-2008, David B Funk wrote:
>I recently noticed that DNS_FROM_SECURITYSAGE was hitting everything.

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5672

Regards,
-sm 


securitysage is dead (Was: DNS_FROM_SECURITYSAGE broken?)

Posted by mouss <mo...@netoyen.net>.
David B Funk wrote:
> I recently noticed that DNS_FROM_SECURITYSAGE was hitting everything.

"Zed's dead, baby. Zed's dead."

They list the universe so that people stop querying their zones.

> 
> A quick check revealed:
> 
>  # host hp.com.blackhole.securitysage.com.
>  hp.com.blackhole.securitysage.com has address 127.0.0.1
>  # host blackhole.securitysage.com.
>  blackhole.securitysage.com has address 127.0.0.1
>  # host securitysage.com.
>  securitysage.com has address 127.0.0.1
> 
> So it appears that their DNS is totally broken. they've
> been seriously hijacked, or they've pulled an ordb.org.
> 
> Attempts to contact them havn't worked.
> 
> Anybody know what's going on?
>