[Users] Sometime t_really() func seem to be endless

Bogdan-Andrei Iancu bogdan at voice-system.ro
Thu May 24 15:52:54 CEST 2007


Bodin Bruno wrote:
> Bogdan-Andrei Iancu a écrit :
>> Henning Westerholt wrote:
>>> On Donnerstag, 24. Mai 2007, Bogdan-Andrei Iancu wrote:
>>>  
>>>> Hi Bodin,
>>>>
>>>> that's because of the blacklists - openser "learns" the failed
>>>> destinations (like the 503 replied) and block them for some time (4
>>>> minutes) to prevent useless processing.
>>>>
>>>> You can disable this auto-learning for blacklists:
>>>>     disable_dns_blacklist=yes
>>>>     
>>>
>>> To warm-up an old discussion about this feature:
>>>
>>> i think this should be really disabled by default, because of user 
>>> confusion and possible security issues.
>>>   
>> I agree it confuses a bit (maybe because of the lack of docs), but 
>> other other hand it is useful as it spears a lot of resources without 
>> any deep knowledge from the user. Anyhow, what security issues do you 
>> see here?
>>
>> regards,
>> bogdan
>>
> but is it possible to make a white list to counter black list and keep 
> this feature ?
>

no, unfortunately there is no such white list...

regards,
bogdan




More information about the Users mailing list