You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Axb <ax...@gmail.com> on 2014/03/26 17:33:09 UTC

FWD: Some changes at the AHBL

FYI.

DNS_FROM_AHBL_RHSBL will be removed from SA in the next couple of rule 
updates.

If you have any META rules using DNS_FROM_AHBL_RHSBL make sure you adapt.

_____
On 03/26/2014 04:59 PM, Brielle Bruns wrote:

Hey All,

So, this has been a long time coming, but figured I'd make the announcement.

I'm winding down the public DNSbl services of the AHBL.

This means the dnsbl.ahbl.org, ircbl.ahbl.org, rhsbl.ahbl.org lists are 
all going away, as is the public lookup/removal tool.

There's a few reasons why this is coming about - one of them being that 
I feel that I've accomplished what I set out to do with the AHBL.

We had an 11 year run - quite good IMHO.  We've been sued (and won), 
DDoS'd, Real Life(tm) stalked, had other people in this community turn 
their backs on us because we made some hard decisions they didn't agree 
with...  List could go on for a while.

=-=-=-=

I expect that over the next few days (Sat. at the latest) I'll be 
clearing out the three main zones of data, and removing their NS records 
shortly after.

I'm planning Jan 1st, 2015 to wildcard the DNSbl zones for anyone that 
doesn't bother to maintain their mail services.

The website isn't going anywhere, neither is any of our docs and things 
like the kook mail.

We do have some private services that will keep running - and I'm likely 
going to be offering invitations to our private DNSbl list at some point 
in the near future.

There is a good chance that I'll be reopening the RHSbl under a new name 
down the line as well.


Anyways, hit me up on-list or off-list if you have any questions or 
comments.


-- 
Brielle Bruns
The Summit Open Source Development Group
http://www.sosdg.org    /     http://www.ahbl.org

Re: Some changes at the AHBL

Posted by John Hardin <jh...@impsec.org>.
On Sat, 5 Apr 2014, Kevin A. McGrail wrote:

> I do not think Darxus' script is firing correctly.  I believe we have 
> had updates for the past week or so.

Whoops! You're correct, one went out last night. Apologies.

--
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   The difference is that Unix has had thirty years of technical
   types demanding basic functionality of it. And the Macintosh has
   had fifteen years of interface fascist users shaping its progress.
   Windows has the hairpin turns of the Microsoft marketing machine
   and that's all.                                    -- Red Drag Diva
-----------------------------------------------------------------------
  8 days until Thomas Jefferson's 271st Birthday

Re: Some changes at the AHBL

Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
I do not think Darxus' script is firing correctly.  I believe we have had updates for the past week or so.  
Regards,
KAM

John Hardin <jh...@impsec.org> wrote:

>On Fri, 4 Apr 2014, Alex wrote:
>
>> On Wed, Mar 26, 2014 at 12:33 PM, Axb <ax...@gmail.com> wrote:
>>
>>> FYI.
>>>
>>> DNS_FROM_AHBL_RHSBL will be removed from SA in the next couple of
>rule
>>> updates.
>>>
>>> If you have any META rules using DNS_FROM_AHBL_RHSBL make sure you
>adapt.
>>
>> Just wondering if either these changes have already been made and I'm
>not
>> seeing it, or if there was a timeline we should expect to see this
>removed
>> in the updates?
>
>They have been disabled in SVN. The masscheck corpus is ham-starved at
>the 
>moment and rule updates are not being produced.
>
>-- 
>  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
>  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
>  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
>-----------------------------------------------------------------------
>   Activist: Someone who gets involved.
>   Unregistered Lobbyist: Someone who gets involved with something
>     the MSM doesn't approve of.                           -- WizardPC
>-----------------------------------------------------------------------
>  9 days until Thomas Jefferson's 271st Birthday

Re: Some changes at the AHBL

Posted by John Hardin <jh...@impsec.org>.
On Fri, 4 Apr 2014, Alex wrote:

> On Wed, Mar 26, 2014 at 12:33 PM, Axb <ax...@gmail.com> wrote:
>
>> FYI.
>>
>> DNS_FROM_AHBL_RHSBL will be removed from SA in the next couple of rule
>> updates.
>>
>> If you have any META rules using DNS_FROM_AHBL_RHSBL make sure you adapt.
>
> Just wondering if either these changes have already been made and I'm not
> seeing it, or if there was a timeline we should expect to see this removed
> in the updates?

They have been disabled in SVN. The masscheck corpus is ham-starved at the 
moment and rule updates are not being produced.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Activist: Someone who gets involved.
   Unregistered Lobbyist: Someone who gets involved with something
     the MSM doesn't approve of.                           -- WizardPC
-----------------------------------------------------------------------
  9 days until Thomas Jefferson's 271st Birthday

Re: Some changes at the AHBL

Posted by Alex <my...@gmail.com>.
Hi,

On Wed, Mar 26, 2014 at 12:33 PM, Axb <ax...@gmail.com> wrote:

> FYI.
>
> DNS_FROM_AHBL_RHSBL will be removed from SA in the next couple of rule
> updates.
>
> If you have any META rules using DNS_FROM_AHBL_RHSBL make sure you adapt.
>

Just wondering if either these changes have already been made and I'm not
seeing it, or if there was a timeline we should expect to see this removed
in the updates?

I'm still seeing invalid queries:

Apr  4 18:54:03 mail01 postfix/dnsblog[9823]: warning: dnsblog_query:
lookup error for DNS query 141.73.6.184.dnsbl.ahbl.org: Host or domain name
not found. Name service error for name=141.73.6.184.dnsbl.ahbl.org type=A:
Host not found, try again

If we zero the DNS_FROM_AHBL_RHSBL score, will it prevent further queries?
I don't have any META rules using it currently.

Thanks,
Alex