Bug 5641 - Spamhaus is non-free for commercial use
Summary: Spamhaus is non-free for commercial use
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Libraries (show other bugs)
Version: SVN Trunk (Latest Devel Version)
Hardware: Other other
: P5 normal
Target Milestone: 3.4.1
Assignee: SpamAssassin Developer Mailing List
Depends on:
Reported: 2007-09-06 17:40 UTC by Daryl C. W. O'Shea
Modified: 2015-04-12 15:30 UTC (History)
2 users (show)

Attachment Type Modified Status Actions Submitter/CLA Status

Note You need to log in before you can comment on or make changes to this bug.
Description Daryl C. W. O'Shea 2007-09-06 17:40:41 UTC
Matt Kettler wrote:
> Should we disable Spamhaus by
> default as we've done in the past for razor and DCC? They're no longer
> "free for everyone", and actually even reasonably small networks can't
> use them for free (100 user limit).

Theo Van Dinter wrote:
> Sounds reasonable to me.

Daryl C. W. O'Shea wrote:
> This has been on my mind for a while.  I'd hate to lose accurate scoring 
> on a set of rules that hits such a large proportion of mail.

Justin Mason wrote:
> good point about Spamhaus... 100 user limit is tiny!  We may
> indeed have to do something about that, but I agree with Daryl; the
> Spamhaus rules are very accurate.
Comment 1 Martin Lathoud 2007-09-06 18:05:29 UTC
In my experience almost all of Spamhaus hits come from their inclusion of
cbl.abuseat.org in xbl, and it would be a good substitute since their terms of
service are not restrictive (see http://cbl.abuseat.org/tandc.html).
Comment 2 Matt Kettler 2007-09-06 18:48:50 UTC
With regards to CBL, they specifically state that they would prefer users to not
querry CBL directly, but use XBL instead.

It's not in their T&C, however, we should at least open a dialog with CBL before
making that change.

See the "DNSBL Setup Recommendations" section of:


Where it states:
"Generally speaking, we prefer users to use the SpamHaus DNSBL system to get
access to the CBL, instead of the CBL directly. "

And also:

"WARNING: it is CBL policy that spam filter and spam filter service vendors MUST
obtain a paid-for feed from Spamhaus. Filter providers that do not have a
paid-for feed from Spamhaus, or who have not registered for the CBL feed, MAY
find themselves inhibited from obtaining a CBL feed without warning."

Comment 3 Justin Mason 2010-01-27 02:20:49 UTC
moving most remaining 3.3.0 bugs to 3.3.1 milestone
Comment 4 Justin Mason 2010-01-27 03:16:33 UTC
reassigning, too
Comment 5 Justin Mason 2010-03-23 16:33:49 UTC
moving all open 3.3.1 bugs to 3.3.2
Comment 6 Karsten Bräckelmann 2010-03-23 17:42:53 UTC
Moving back off of Security, which got changed by accident during the mass Target Milestone move.
Comment 7 Kevin A. McGrail 2013-06-21 16:08:16 UTC
Moving all open bugs where target is defined and 3.4.0 or lower to 3.4.1 target
Comment 8 Kevin A. McGrail 2015-04-12 15:30:38 UTC
Free for all is not a requirement of the DNSBL policy written after this ticket was open.

See https://wiki.apache.org/spamassassin/DnsBlocklistsInclusionPolicy