[Users] Sometime t_really() func seem to be endless

Bogdan-Andrei Iancu bogdan at voice-system.ro
Thu May 24 15:40:43 CEST 2007


Henning Westerholt wrote:
> On Donnerstag, 24. Mai 2007, Bogdan-Andrei Iancu wrote:
>   
>> Hi Bodin,
>>
>> that's because of the blacklists - openser "learns" the failed
>> destinations (like the 503 replied) and block them for some time (4
>> minutes) to prevent useless processing.
>>
>> You can disable this auto-learning for blacklists:
>>     disable_dns_blacklist=yes
>>     
>
> To warm-up an old discussion about this feature:
>
> i think this should be really disabled by default, because of user confusion 
> and possible security issues.
>   
I agree it confuses a bit (maybe because of the lack of docs), but other 
other hand it is useful as it spears a lot of resources without any deep 
knowledge from the user. Anyhow, what security issues do you see here?

regards,
bogdan





More information about the Users mailing list