You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@issues.apache.org on 2010/12/26 09:39:20 UTC

[Bug 6526] New: Disable rfc-ignorant.org

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

           Summary: Disable rfc-ignorant.org
           Product: Spamassassin
           Version: 3.3.1
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: wtogami@gmail.com


Bug #6525 proposes disabling NJABL in the default ruleset because it is the
poorest performing DNSBL.  Its extremely tiny hit rate is not worth the cost of
a network query.

This is to open discussion of the second poorest performing DNSBL,
rfc-ignorant.org.

http://ruleqa.spamassassin.org/20101225-r1052760-n/DNS_FROM_RFC_DSN/detail
50_scores.cf:score DNS_FROM_RFC_DSN 0 0.001 0 0.001 # n=0 n=2
Poor hit rate, and we apparently don't give it a score because it is unsafe.

http://ruleqa.spamassassin.org/20101225-r1052760-n/DNS_FROM_RFC_BOGUSMX/detail
50_scores.cf:score DNS_FROM_RFC_BOGUSMX 0 1.464 0 1.668 # n=0 n=2
Very poor hit rate, but we do give it a score.

I believe we should disable this in the default rules because this very poor
hit rate and score addition is not worth the extra network query.  This rule
should be an option for sysadmins to enable manually if they really want it.

This proposed change would have very little impact on spamassassin's outcome,
but it would free up a network query that could be used for something else more
productive.

Discuss?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #62 from D. Stussy <so...@kd6lvw.ampr.org> ---
It appears that the .de TLD reincarnation of rfc-ignorant has been abandoned. 
Its domain registration has expired (currently in the 30 day redemption/purge
pending period) and the project itself never populated a database.

Domain: rfc-ignorant.de
Status: redemptionPeriod
Changed: 2014-01-22T09:40:04+01:00

Therefore, I see no reason to render its rules to the "removed" SA rule page.

CC:  Bug 6836.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #37 from Kevin A. McGrail <km...@pccc.com> 2011-05-11 19:13:53 UTC ---
(In reply to comment #36)
> (In reply to comment #35)
> > > Suggesting to remove the v332.pre.
> > > 
> > > Reopening to sort out this concern.
> > 
> > This is a blocker to releasing 3.32 IMO.  In hindsight, you are correct.  I
> > didn't think about it when applying the patch.
> > 
> > Is there any existing cf convention to follow for this?
> > 
> > My thoughts are to create a v332.cf with an opening comment similar to v332.pre
> > but reflecting rules rather than plugins.  Or to add this to the bottom of
> > local.cf.
> 
> I don't see any legitimate reason to keep this in any form in spamassassin.  I
> think we should just delete the .pre file as Mark suggests.

I disagree but I'm not voting -1. I'd prefer the commented rule stays there for
administrators to make an informed decision.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #44 from Darxus <Da...@ChaosReigns.com> 2011-05-31 23:22:37 UTC ---
Close.  Already committed to trunk and 3.3.

Unless you really want to "...discuss figure out if we want commented out rules
for 3.4.0."

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

AXB <ax...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|axb.lists@gmail.com         |

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #51 from Kevin A. McGrail <km...@pccc.com> 2011-06-01 18:31:24 UTC ---
(In reply to comment #50)
> (In reply to comment #49)
> > (In reply to comment #48)
> > > I'm +1 for nuking any/all reference to rfc-ignorant.org and turn it into a wiki
> > > post for those who must have the extra pointless  BL lookup.
> > 
> > That's a great idea.  How about a generic wiki that can list any rules or
> > things that admins might consider? +1
> 
> +1, as this is pretty similar to what I've been suggesting for months. =)

I'm sorry but I must have missed that.  I had you in the "delete it, pretend it
never existed and disavow all knowledge of said rule" category.

I'll work on this after the 3.3.2 release.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #32 from Kevin A. McGrail <km...@pccc.com> 2011-05-06 20:49:58 UTC ---
It's no worries.  I didn't know to cp v330.pre to v332.pre.  Assumed your patch
created that file.  Also realized I needed to add v332.pre to MANIFEST.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #50 from Warren Togami <wt...@gmail.com> 2011-06-01 16:20:19 UTC ---
(In reply to comment #49)
> (In reply to comment #48)
> > I'm +1 for nuking any/all reference to rfc-ignorant.org and turn it into a wiki
> > post for those who must have the extra pointless  BL lookup.
> 
> That's a great idea.  How about a generic wiki that can list any rules or
> things that admins might consider? +1

+1, as this is pretty similar to what I've been suggesting for months. =)

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #25 from John Hardin <jh...@impsec.org> 2011-05-04 19:56:13 UTC ---
(In reply to comment #24)
>
> John Hardin still needs to set his RFC_ABUSE_POST to 0, as he said he would.  

$ svn commit -m "Support for bug6526"
Sending        jhardin/20_misc_testing.cf
Transmitting file data .
Committed revision 1099578.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #19 from Kevin A. McGrail <km...@pccc.com> 2011-01-20 17:51:42 UTC ---
(In reply to comment #18)
> Is it really necessary to keep a proven ineffective rule in .pre forever?
> 
> Nothing stops a user from copying the entire rule from an archive we keep
> elsewhere of retired rule examples.

I prefer to keep things in place so users are empowered to enable them by
default.

I expect we may have more RBLs that fall under this category for example with
query limits more so than performance issues.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #17 from Kevin A. McGrail <km...@pccc.com> 2011-01-20 16:49:03 UTC ---
(In reply to comment #15)
> Hmm, could you go ahead so I can learn from your example?  I am not 100% sure
> what you mean.

I'm not sure it's ever been done.  From looking, it appears scores like 0.001
were used which doesn't achieve the goal of saving the query.

So my belief is we need to disable these rules in 20_dnsbl_tests.cf by going
into 50_scores.cf and setting the scores to 0.0 for these rules.

20_dnsbl_tests.cf:header __RFC_IGNORANT_ENVFROM  
eval:check_rbl_envfrom('rfci_envfrom', 'fulldom.rfc-ignorant.org.')
20_dnsbl_tests.cf:header DNS_FROM_RFC_DSN        
eval:check_rbl_sub('rfci_envfrom', '127.0.0.2')
20_dnsbl_tests.cf:header DNS_FROM_RFC_BOGUSMX    
eval:check_rbl_sub('rfci_envfrom', '127.0.0.8')
20_dnsbl_tests.cf:header __DNS_FROM_RFC_POST     
eval:check_rbl_sub('rfci_envfrom', '127.0.0.3')
20_dnsbl_tests.cf:header __DNS_FROM_RFC_ABUSE    
eval:check_rbl_sub('rfci_envfrom', '127.0.0.4')
20_dnsbl_tests.cf:header __DNS_FROM_RFC_WHOIS    
eval:check_rbl_sub('rfci_envfrom', '127.0.0.5')

I would then cut and paste the existing score lines from there to a new file
v332.pre, comment them and write a note that these were disabled by default in
the core rules due to poor performance and to enable them, uncomment the
scores.

Does a score of 0.0 make it so that mass check doesn't test the rule? 

Finally, 72_active.cf has a meta rule RFC_ABUSE_POST that also should be scored
to 0 and added to the pre file.

Anyone know a better procedure?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #31 from Darxus <Da...@ChaosReigns.com> 2011-05-06 20:47:32 UTC ---
Sorry, I'm really curious why svn cp, modification, then svn diff didn't result
in a patch that applied without problems.  I was hoping that as weird as the
patch looked, it would work for some reason I was missing.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

AXB <ax...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |axb.lists@gmail.com

--- Comment #11 from AXB <ax...@gmail.com> 2011-01-20 10:07:59 UTC ---
(In reply to comment #10)
> (In reply to comment #9)
> 
> > For these reasons I propose making rfc-ignorant.org "tflags nopublish" for
> > trunk.
> > 
> > Any further comments?
> 
> I think it would be better to score it 0.0 to allow an administrator to enable
> it at their option, yes?
> 
> But I am +1 to disable it by default.
> 
> KAM


+1 to disable (not remove)

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

Kevin A. McGrail <km...@pccc.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|                            |FIXED

--- Comment #59 from Kevin A. McGrail <km...@pccc.com> 2011-06-23 17:42:22 UTC ---
(In reply to comment #58)
> Created attachment 4926 [details]
> Remove rules from trunk's local.cf
> 
> Created http://wiki.apache.org/spamassassin/RemovedRulesets with the stuff from
> RFC-Ignorant.  Linked from http://wiki.apache.org/spamassassin/CustomRulesets .
> 
> This patch removes it from trunk's rules/local.cf (comment 43).  This bug can
> be closed as soon as that's committed.
> 
> The wiki asking me questions I need to google every time I edit it is pissing
> me off:
> "Who is the current President of the ASF (full name)?"
> "ApacheCon Europe 2007 was hosted in which city?"
> Can this be fixed?

(In reply to comment #58)
> Created attachment 4926 [details]
> Remove rules from trunk's local.cf
> 
> Created http://wiki.apache.org/spamassassin/RemovedRulesets with the stuff from
> RFC-Ignorant.  Linked from http://wiki.apache.org/spamassassin/CustomRulesets .
> 
> This patch removes it from trunk's rules/local.cf (comment 43).  This bug can
> be closed as soon as that's committed.
> 
> The wiki asking me questions I need to google every time I edit it is pissing
> me off:
> "Who is the current President of the ASF (full name)?"
> "ApacheCon Europe 2007 was hosted in which city?"
> Can this be fixed?

Done.  Can you repeat for bug 6490 also at the bottom of local.cf?

svn commit -m 'remove RFC-Ignorant now that it is documented on
http://wiki.apache.org/spamassassin/RemovedRulesets' 
Sending        rules/local.cf
Transmitting file data .
Committed revision 1139012.

re: wiki turing test, I can't recreate the issue.  Please discuss on dev list.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #47 from Darxus <Da...@ChaosReigns.com> 2011-06-01 15:23:04 UTC ---
(In reply to comment #46)
> This needs to stay on radar because there is commented code in trunk that needs
> to be removed or changed.

Should it be removed or changed?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #28 from Darxus <Da...@ChaosReigns.com> 2011-05-06 18:20:28 UTC ---
Looks like this has the necessary votes (for both trunk and 3.3.2) and just
needs to be committed and closed?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #48 from AXB <ax...@gmail.com> 2011-06-01 15:33:20 UTC ---
(In reply to comment #47)
> (In reply to comment #46)
> > This needs to stay on radar because there is commented code in trunk that needs
> > to be removed or changed.
> 
> Should it be removed or changed?

I'm +1 for nuking any/all reference to rfc-ignorant.org and turn it into a wiki
post for those who must have the extra pointless  BL lookup.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

Warren Togami <wt...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|                            |FIXED

--- Comment #45 from Warren Togami <wt...@gmail.com> 2011-05-31 23:23:28 UTC ---
fixed

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #15 from Warren Togami <wt...@gmail.com> 2011-01-20 15:48:08 UTC ---
Hmm, could you go ahead so I can learn from your example?  I am not 100% sure
what you mean.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #7 from Warren Togami <wt...@gmail.com> 2010-12-27 19:43:16 UTC ---
> Yahoo is listed for reasons valid to the list (abuse and postmaster sublists).
> Considering it is also one of the most forged domains in mailbox addresses,

Spamassassin does not score this.

I am suggesting removal from default rules because it is rather useless in
determining ham vs. spam and it is taking up a network query on every mail
scanned.  If you want to continue to uselessly use rfc-ignorant.org, (or
dangerously enable it with scores), you as the sysadmin may enable these rules
manually.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #10 from Kevin A. McGrail <km...@pccc.com> 2011-01-20 10:04:54 UTC ---
(In reply to comment #9)

> For these reasons I propose making rfc-ignorant.org "tflags nopublish" for
> trunk.
> 
> Any further comments?

I think it would be better to score it 0.0 to allow an administrator to enable
it at their option, yes?

But I am +1 to disable it by default.

KAM

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

Kevin A. McGrail <km...@pccc.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|3.3.2                       |3.4.0

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #43 from Kevin A. McGrail <km...@pccc.com> 2011-05-12 13:48:29 UTC ---
Pre Files removed for v332 and v340 and added to local.cf for consideration in
trunk.  Removing v332.pre in 3.3 branch as that's clearly wrong. 

3.3 branch:
Deleting       rules/v332.pre

Committed revision 1102298.

Trunk:
Sending        rules/local.cf
Deleting       rules/v332.pre
Deleting       rules/v340.pre
Transmitting file data .
Committed revision 1102296.

Rules commented out in local.cf in trunk. This makes the issue "solved" for
3.3.2 and we can discuss figure out if we want commented out rules for 3.4.0.

Regards,
KAM

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

software+spamassassin@kd6lvw.ampr.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |software+spamassassin@kd6lv
                   |                            |w.ampr.org

--- Comment #6 from software+spamassassin@kd6lvw.ampr.org 2010-12-27 19:32:01 UTC ---
Are you certain you want to do this?  One of the larger "free mailbox"
providers is actually listed:

<dns:yahoo.com.fulldom.rfc-ignorant.org> [127.0.0.4, 127.0.0.3]

Yahoo is listed for reasons valid to the list (abuse and postmaster sublists).

Considering it is also one of the most forged domains in mailbox addresses,
....

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

Kevin A. McGrail <km...@pccc.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #30 from Kevin A. McGrail <km...@pccc.com> 2011-05-06 20:36:40 UTC ---
Sorry, took me a while to figure out the patch was based on copying v330.pre to
v332.pre but got it all resolved.

3.3 branch
Sending        MANIFEST
Sending        rules/50_scores.cf
Transmitting file data ..
Committed revision 1100355.

and
Adding         rules/v332.pre
Transmitting file data .
Committed revision 1100357.

trunk

Sending        MANIFEST
Sending        rules/50_scores.cf
Adding         rules/v332.pre
Transmitting file data ...
Committed revision 1100362.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #20 from Warren Togami <wt...@gmail.com> 2011-01-20 18:15:15 UTC ---
Hmm, I just realized that disabling this rule in production effectively ends
our ability to measure it accurately in masscheck due to "reuse".  So we must
decide all or nothing.  If it is disabled in production, there is no point in
having it in masscheck anymore as the results are assured to be incorrect.

I disagree that it is helpful to move it to a .pre file but I agree that is a
reasonable compromise if you folks don't want it completely removed.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #22 from Warren Togami <wt...@gmail.com> 2011-01-20 19:14:19 UTC ---
> This is assuming that score 0.0 negates masschecking. 

I think that isn't the case?

I think... just go ahead and make your desired change and let's see what
happens in tonight's masscheck.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #16 from software+spamassassin@kd6lvw.ampr.org 2011-01-20 16:36:34 UTC ---
I agree with scoring it as zero (as opposed to "hard" removal) at this time, as
these are rules that do occasionally fire.

Perhaps there should be a standard proceedure to deal with rules deemed of
little to no effect.  Two steps:

1)  Change score to zero (thus deactivating it by default) after discussion,
etc.
2)  Some time later (6 months to a year), remove it from the published
rulesets, perhaps after a second discussion.

OK, so that's a bit bureaucratic, but it gives people a chance to comment and
for those who choose to continue its use, an opportunity to move it to their
local rulesets (and out of the common, published rules).



In the specific case of the "bogus MX" rule, is it possible that the low firing
may be because other code in your MTA (e.g. at the MAIL FROM stage) is checking
and rejecting sending sources with bogus MX records before SA ever sees the
message?  Such is the case at my system, but that check only considers the
sender, not other fields such as intermediate relays, any "Reply-To:" address,
etc.  I just want to confirm that your (Warren's) low hit rate isn't due to
another check performed before SA ever sees the message.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #61 from AXB <ax...@gmail.com> ---
(In reply to Tristan Miller from comment #60)
> Rfc-ignorant.org went down permanently on 30 November 2012.  (See the
> announcement at
> <https://web.archive.org/web/20121013071621/http://rfc-ignorant.org/
> endofanera.php>.)  Perhaps the "Removed Rulesets" wiki page could be updated
> to reflect this, just in case anyone is still using the rule and isn't sure
> why it's no longer working.

see

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6836

2012-09-15

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #57 from Warren Togami <wt...@gmail.com> 2011-06-01 19:45:26 UTC ---
(In reply to comment #56)
> (In reply to comment #54)
> > There's already a place for rules which aren't included with SA:
> > 
> > http://wiki.apache.org/spamassassin/CustomRulesets
> 
> I think that's more for rules that never were a part of SA, though.  My
> thoughts are most along the lines of D.Stussy's comments in #53 but a new wiki
> page is fine too.

Wiki page, please.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #55 from D. Stussy <so...@kd6lvw.ampr.org> 2011-06-01 19:42:12 UTC ---
Custom rulesets are for EXTRA rules.  My suggestion is for REMOVED rules which
were present in the SA official channel, and a way to alert people of rules'
removal in a way which allows them to save a copy should they want to use it
locally even after its removal.  I leave the expiration period (suggested
minimum of 1 month) for the discussion (and suggest it only to prevent an
infinently growing file).

Simply removing a rule then telling people its gone doesn't give them a chance
to save it locally.  Some people might not be smart enough to write their own
rules.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #41 from Darxus <Da...@ChaosReigns.com> 2011-05-11 19:36:32 UTC ---
This subject has gotten far more attention today than it's worth.  I'm
comfortable with whatever gets it closed.  Maybe put it back in
rules/50_scores.cf commented out?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #24 from Darxus <Da...@ChaosReigns.com> 2011-05-04 18:56:23 UTC ---
Created attachment 4868
  --> https://issues.apache.org/SpamAssassin/attachment.cgi?id=4868
Set scores to 0, move old scores to rules/v332.pre

I think this patch matches consensus.  Sets the scores for DNS_FROM_RFC_DSN and
DNS_FROM_RFC_BOGUSMX to 0, copies old scores to v332.pre.  

I don't think there was consensus for completely removing the rules.

John Hardin still needs to set his RFC_ABUSE_POST to 0, as he said he would.  

The diff looks a little weird for v332.pre - I did a svn cp from v330.pre then
edited it.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #52 from Warren Togami <wt...@gmail.com> 2011-06-01 19:11:28 UTC ---
(In reply to comment #51)
> I'm sorry but I must have missed that.  I had you in the "delete it, pretend it
> never existed and disavow all knowledge of said rule" category.

I thought "document it elsewhere" and I thought I communicated that on list. 
In any case, no need to beat a dead horse.  I'm glad this is the outcome.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #3 from Kevin A. McGrail <km...@pccc.com> 2010-12-26 16:16:28 UTC ---
(In reply to comment #2)
> Sigh.  Please read the link above.

I mean on your system.  The corpora don't contain enough ham usually for me to
guage fps.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

mouss <mo...@netoyen.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|mouss@netoyen.net           |

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

Tristan Miller <ps...@nothingisreal.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |psychonaut@nothingisreal.co
                   |                            |m

--- Comment #60 from Tristan Miller <ps...@nothingisreal.com> ---
Rfc-ignorant.org went down permanently on 30 November 2012.  (See the
announcement at
<https://web.archive.org/web/20121013071621/http://rfc-ignorant.org/endofanera.php>.)
 Perhaps the "Removed Rulesets" wiki page could be updated to reflect this,
just in case anyone is still using the rule and isn't sure why it's no longer
working.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

John Hardin <jh...@impsec.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jhardin@impsec.org

--- Comment #12 from John Hardin <jh...@impsec.org> 2011-01-20 11:02:54 UTC ---
+1 to disable, but not remove.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #39 from Mark Martinec <Ma...@ijs.si> 2011-05-11 19:29:00 UTC ---
Why not just put it into 50_scores.cf where I think it belongs?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #40 from Warren Togami <wt...@gmail.com> 2011-05-11 19:30:12 UTC ---
(In reply to comment #39)
> Why not just put it into 50_scores.cf where I think it belongs?

Wouldn't that keep it in masschecks?  That is a non-goal.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #35 from Kevin A. McGrail <km...@pccc.com> 2011-05-11 18:55:32 UTC ---
(In reply to comment #34)
> (In reply to Bug 6490 comment #35)
> (Michael Parker, 2011-05-11 15:44:31 UTC)
> > You shouldn't add rules, even disabled, to .pre files.
> 
> I fully agree. A .pre file is for plugins and possibly for fixing
> some other anomaly, not for rules or scores. As there is nothing
> else besides a commented score there, and no changes in plugin
> loading needed for 3.3.2, I don't think we need the v332.pre at all.
> 
> Suggesting to remove the v332.pre.
> 
> Reopening to sort out this concern.

This is a blocker to releasing 3.32 IMO.  In hindsight, you are correct.  I
didn't think about it when applying the patch.

Is there any existing cf convention to follow for this?

My thoughts are to create a v332.cf with an opening comment similar to v332.pre
but reflecting rules rather than plugins.  Or to add this to the bottom of
local.cf.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

Darxus <Da...@ChaosReigns.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |Darxus@ChaosReigns.com

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #5 from Warren Togami <wt...@gmail.com> 2010-12-26 16:29:45 UTC ---
Quick and dirty look... during the last week of my logs.

20633 mail scanned by spamassassin
272 hits on DNS_FROM_RFC_BOGUSMX
6 FP's

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #38 from Warren Togami <wt...@gmail.com> 2011-05-11 19:16:49 UTC ---
(In reply to comment #37)
> I disagree but I'm not voting -1. I'd prefer the commented rule stays there for
> administrators to make an informed decision.

But is it really an *informed* decision?  Many folks think using this DNSBL is
a good idea, until a hard look at the statistics demonstrates this to be false.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

Mark Martinec <Ma...@ijs.si> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |

--- Comment #34 from Mark Martinec <Ma...@ijs.si> 2011-05-11 18:49:55 UTC ---
(In reply to Bug 6490 comment #35)
(Michael Parker, 2011-05-11 15:44:31 UTC)
> You shouldn't add rules, even disabled, to .pre files.

I fully agree. A .pre file is for plugins and possibly for fixing
some other anomaly, not for rules or scores. As there is nothing
else besides a commented score there, and no changes in plugin
loading needed for 3.3.2, I don't think we need the v332.pre at all.

Suggesting to remove the v332.pre.

Reopening to sort out this concern.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

Kevin A. McGrail <km...@pccc.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |

--- Comment #46 from Kevin A. McGrail <km...@pccc.com> 2011-06-01 14:12:13 UTC ---
This needs to stay on radar because there is commented code in trunk that needs
to be removed or changed.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #14 from Kevin A. McGrail <km...@pccc.com> 2011-01-20 15:36:09 UTC ---
(In reply to comment #13)
> Does "disable (not remove)" mean "tflags nopublish" so it remains in masscheck
> but not production?

My thoughts are score 0.0, remove it from being masschecked, and change the
documentation perhaps in a .pre file that it's disabled with commented scores
to re-enable it.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #21 from Kevin A. McGrail <km...@pccc.com> 2011-01-20 18:45:26 UTC ---
(In reply to comment #20)
> Hmm, I just realized that disabling this rule in production effectively ends
> our ability to measure it accurately in masscheck due to "reuse".  So we must
> decide all or nothing.  If it is disabled in production, there is no point in
> having it in masscheck anymore as the results are assured to be incorrect.

That is expected on my part.  Should we want to mass check it again, it should
be added to your sandbox as new rules with a tflags nopublish would be my best
guess.

This is assuming that score 0.0 negates masschecking. 

Regards,
KAM

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #23 from John Hardin <jh...@impsec.org> 2011-01-21 00:14:34 UTC ---
(In reply to comment #17)
> (In reply to comment #15)
> > Hmm, could you go ahead so I can learn from your example?  I am not 100% sure
> > what you mean.
> 
> I'm not sure it's ever been done.  From looking, it appears scores like 0.001
> were used which doesn't achieve the goal of saving the query.

That's for "informative" rules (like my LOTS_OF_MONEY) where you want the
recipient to see the hit but that by themselves shouldn't affect the score.

> So my belief is we need to disable these rules in 20_dnsbl_tests.cf by going
> into 50_scores.cf and setting the scores to 0.0 for these rules.

Correct.

> Finally, 72_active.cf has a meta rule RFC_ABUSE_POST that also should be scored
> to 0 and added to the pre file.

That's mine, and it's a meta of two base RFC rules. If they're scored zero it
won't fire. If we do completely remove the base RFC rules, I'll pull that one
too.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

Kevin A. McGrail <km...@pccc.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kmcgrail@pccc.com

--- Comment #1 from Kevin A. McGrail <km...@pccc.com> 2010-12-26 11:05:42 UTC ---
I would support disabling the dsn rule by default.  What fp rate are you seeing
on the bogus mx list?

Regards,
KAM

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

Warren Togami <wt...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|Undefined                   |3.3.2

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #54 from Darxus <Da...@ChaosReigns.com> 2011-06-01 19:30:41 UTC ---
There's already a place for rules which aren't included with SA:

http://wiki.apache.org/spamassassin/CustomRulesets

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #56 from Kevin A. McGrail <km...@pccc.com> 2011-06-01 19:42:30 UTC ---
(In reply to comment #54)
> There's already a place for rules which aren't included with SA:
> 
> http://wiki.apache.org/spamassassin/CustomRulesets

I think that's more for rules that never were a part of SA, though.  My
thoughts are most along the lines of D.Stussy's comments in #53 but a new wiki
page is fine too.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Re: Wiki hates me Re: [Bug 6526] Disable rfc-ignorant.org

Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
> I just lost one of my edits because I got a question wrong.  Can somebody
> get the wiki to stop asking me questions every time I try to edit it?
>
> "TextCha: Wrong answer! Go back and try again..."
> And clicking back isn't helping.
>
> It's very discouraging.

Never seen this.  Something called TextCha which I didn't even know we 
had.  Likely something from a new version installed or has never 
affected me with some sort of elevated access.  Since we use ACLs for 
edits, this is hardly necessary and I've opened an INFRA ticket to get 
it resolved.

https://issues.apache.org/jira/browse/INFRA-3731

Regards,
KAM

Wiki hates me Re: [Bug 6526] Disable rfc-ignorant.org

Posted by da...@chaosreigns.com.
On 06/23, bugzilla-daemon@bugzilla.spamassassin.org wrote:
> --- Comment #58 from Darxus <Da...@ChaosReigns.com> 2011-06-23 17:34:56 UTC ---
...
> The wiki asking me questions I need to google every time I edit it is pissing
> me off:
> "Who is the current President of the ASF (full name)?"
> "ApacheCon Europe 2007 was hosted in which city?"
> Can this be fixed?

I just lost one of my edits because I got a question wrong.  Can somebody
get the wiki to stop asking me questions every time I try to edit it?  

"TextCha: Wrong answer! Go back and try again..."
And clicking back isn't helping.

It's very discouraging.

-- 
"Life is either a daring adventure or it is nothing at all."
- Helen Keller
http://www.ChaosReigns.com

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #58 from Darxus <Da...@ChaosReigns.com> 2011-06-23 17:34:56 UTC ---
Created attachment 4926
  --> https://issues.apache.org/SpamAssassin/attachment.cgi?id=4926
Remove rules from trunk's local.cf

Created http://wiki.apache.org/spamassassin/RemovedRulesets with the stuff from
RFC-Ignorant.  Linked from http://wiki.apache.org/spamassassin/CustomRulesets .

This patch removes it from trunk's rules/local.cf (comment 43).  This bug can
be closed as soon as that's committed.

The wiki asking me questions I need to google every time I edit it is pissing
me off:
"Who is the current President of the ASF (full name)?"
"ApacheCon Europe 2007 was hosted in which city?"
Can this be fixed?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #2 from Warren Togami <wt...@gmail.com> 2010-12-26 15:04:40 UTC ---
Sigh.  Please read the link above.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

mouss <mo...@netoyen.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mouss@netoyen.net

--- Comment #4 from mouss <mo...@netoyen.net> 2010-12-26 16:18:41 UTC ---
(In reply to comment #3)
> (In reply to comment #2)
> > Sigh.  Please read the link above.
> 
> I mean on your system.  The corpora don't contain enough ham usually for me to
> guage fps.

+1 for removal

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #33 from Darxus <Da...@ChaosReigns.com> 2011-05-10 16:47:25 UTC ---
(In reply to comment #26)
> sad to see it happend

Shortly after I submitted the patch, I felt somewhat remorseful.  I *like* when
people who violate RFCs are penalized.  But then I read into the details of
what exact RFC violations were being penalized, and lost all my remorse.  They
really don't seem worth it.  

They're explained in detail here:
http://www.rfc-ignorant.org/policy-dsn.php - for DNS_FROM_RFC_DSN
http://www.rfc-ignorant.org/policy-bogusmx.php - for DNS_FROM_RFC_BOGUSMX

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Re: [Bug 6526] Disable rfc-ignorant.org

Posted by John Hardin <jh...@impsec.org>.
On Thu, 20 Jan 2011, Lawrence @ Rogers wrote:

> On 20/01/2011 4:56 PM, bugzilla-daemon@issues.apache.org wrote:
>>  https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526
>>
>>  --- Comment #13 from Warren Togami<wt...@gmail.com>  2011-01-20 15:26:18
>>  UTC ---
>>  Does "disable (not remove)" mean "tflags nopublish" so it remains in
>>  masscheck but not production?
> 
> From what I've seen, it means "score the rule at 0.0" and let admins decide 
> whether or not to change the score manually themselves (thereby enabling it).

That's what we meant.

--
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Markley's Law (variant of Godwin's Law): As an online discussion
   of gun owners' rights grows longer, the probability of an ad hominem
   attack involving penis size approaches 1.
-----------------------------------------------------------------------
  3 days until John Moses Browning's 156th Birthday

Re: [Bug 6526] Disable rfc-ignorant.org

Posted by "Lawrence @ Rogers" <la...@nl.rogers.com>.
On 20/01/2011 4:56 PM, bugzilla-daemon@issues.apache.org wrote:
> https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526
>
> --- Comment #13 from Warren Togami<wt...@gmail.com>  2011-01-20 15:26:18 UTC ---
> Does "disable (not remove)" mean "tflags nopublish" so it remains in masscheck
> but not production?
>
 From what I've seen, it means "score the rule at 0.0" and let admins 
decide whether or not to change the score manually themselves (thereby 
enabling it).

Lawrence

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #13 from Warren Togami <wt...@gmail.com> 2011-01-20 15:26:18 UTC ---
Does "disable (not remove)" mean "tflags nopublish" so it remains in masscheck
but not production?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #27 from Warren Togami <wt...@gmail.com> 2011-05-05 01:39:19 UTC ---
(In reply to comment #26)
> sad to see it happend

You are welcome to manually enable rules like this, if you choose to use rules
that make almost no measurable difference.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #18 from Warren Togami <wt...@gmail.com> 2011-01-20 17:46:55 UTC ---
Is it really necessary to keep a proven ineffective rule in .pre forever?

Nothing stops a user from copying the entire rule from an archive we keep
elsewhere of retired rule examples.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #8 from Warren Togami <wt...@gmail.com> 2010-12-29 09:15:39 UTC ---
http://www.sdsc.edu/~jeff/spam/cbc.html
SDSC's weekly statistics agreeing with our own statistics.  Both NJABL and
rfc-ignorant.org are catching 1% or less of spam.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #29 from Kevin A. McGrail <km...@pccc.com> 2011-05-06 18:34:51 UTC ---
(In reply to comment #28)
> Looks like this has the necessary votes (for both trunk and 3.3.2) and just
> needs to be committed and closed?

Correct.  Doing this now.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #53 from D. Stussy <so...@kd6lvw.ampr.org> 2011-06-01 19:22:14 UTC ---
Perhaps there should be a file in the ruleset distribution not ending with .cf
or .pre (therefore not actively used) which accumulates recently removed rules,
especially those which might be deemed useful for the overly paranoid?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #42 from Warren Togami <wt...@gmail.com> 2011-05-11 19:42:49 UTC ---
(In reply to comment #41)
> This subject has gotten far more attention today than it's worth.  I'm
> comfortable with whatever gets it closed.  Maybe put it back in
> rules/50_scores.cf commented out?

This is the worst of all options.  Commenting out only the score would only
disable the rule from production without removing it from masscheck.  Keeping
it in masscheck in any form gives false results that are of no use.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #36 from Warren Togami <wt...@gmail.com> 2011-05-11 19:03:05 UTC ---
(In reply to comment #35)
> > Suggesting to remove the v332.pre.
> > 
> > Reopening to sort out this concern.
> 
> This is a blocker to releasing 3.32 IMO.  In hindsight, you are correct.  I
> didn't think about it when applying the patch.
> 
> Is there any existing cf convention to follow for this?
> 
> My thoughts are to create a v332.cf with an opening comment similar to v332.pre
> but reflecting rules rather than plugins.  Or to add this to the bottom of
> local.cf.

I don't see any legitimate reason to keep this in any form in spamassassin.  I
think we should just delete the .pre file as Mark suggests.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #9 from Warren Togami <wt...@gmail.com> 2011-01-20 04:50:19 UTC ---
To recap:
We have only two enabled rules: DNS_FROM_RFC_DSN and DNS_FROM_RFC_BOGUSMX.  The
others are fully disabled in our ruleset.

BOGUSMX has a production score, but problems...
    - very redundant: 0.7% of BOGUSMX hits score 5 points or below
      40/474K low scoring spam detected by BOGUSMX      
    - 205/258K ham FP on BOGUSMX
    - FP's far outnumber the cases where BOGUSMX would identify low scoring
spam.

DSN is informational because it has been unsafe.  Recent masschecks show 1.6%
spam but 0.5% ham.  Spam hits are similarly entirely high scoring.

These two rules are making effectively zero impact on spam determination
because they hit so rarely and are already high scoring.  The FP rate of
BOGUSMX proves that it is actually doing more harm than good.

For these reasons I propose making rfc-ignorant.org "tflags nopublish" for
trunk.

Any further comments?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

--- Comment #49 from Kevin A. McGrail <km...@pccc.com> 2011-06-01 16:08:12 UTC ---
(In reply to comment #48)
> (In reply to comment #47)
> > (In reply to comment #46)
> > > This needs to stay on radar because there is commented code in trunk that needs
> > > to be removed or changed.
> > 
> > Should it be removed or changed?
> 
> I'm +1 for nuking any/all reference to rfc-ignorant.org and turn it into a wiki
> post for those who must have the extra pointless  BL lookup.

That's a great idea.  How about a generic wiki that can list any rules or
things that admins might consider? +1

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6526] Disable rfc-ignorant.org

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6526

Benny Pedersen <me...@junc.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |me@junc.org

--- Comment #26 from Benny Pedersen <me...@junc.org> 2011-05-05 00:23:03 UTC ---
sad to see it happend

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.