[Users] Sometime t_really() func seem to be endless
Bogdan-Andrei Iancu
bogdan at voice-system.ro
Thu May 24 15:52:54 CEST 2007
Bodin Bruno wrote:
> Bogdan-Andrei Iancu a écrit :
>> Henning Westerholt wrote:
>>> On Donnerstag, 24. Mai 2007, Bogdan-Andrei Iancu wrote:
>>>
>>>> Hi Bodin,
>>>>
>>>> that's because of the blacklists - openser "learns" the failed
>>>> destinations (like the 503 replied) and block them for some time (4
>>>> minutes) to prevent useless processing.
>>>>
>>>> You can disable this auto-learning for blacklists:
>>>> disable_dns_blacklist=yes
>>>>
>>>
>>> To warm-up an old discussion about this feature:
>>>
>>> i think this should be really disabled by default, because of user
>>> confusion and possible security issues.
>>>
>> I agree it confuses a bit (maybe because of the lack of docs), but
>> other other hand it is useful as it spears a lot of resources without
>> any deep knowledge from the user. Anyhow, what security issues do you
>> see here?
>>
>> regards,
>> bogdan
>>
> but is it possible to make a white list to counter black list and keep
> this feature ?
>
no, unfortunately there is no such white list...
regards,
bogdan
More information about the sr-users
mailing list