Bug 5641 - Spamhaus is non-free for commercial use
Summary: Spamhaus is non-free for commercial use
Status: RESOLVED WONTFIX
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Libraries (show other bugs)
Version: SVN Trunk (Latest Devel Version)
Hardware: Other other
: P5 normal
Target Milestone: 3.4.1
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-09-06 17:40 UTC by Daryl C. W. O'Shea
Modified: 2015-04-12 15:30 UTC (History)
2 users (show)


Attachment Type Modified Status Actions Submitter/CLA Status
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Daryl C. W. O'Shea 2007-09-06 17:40:41 UTC 
Matt Kettler wrote:
> Should we disable Spamhaus by
> default as we've done in the past for razor and DCC? They're no longer
> "free for everyone", and actually even reasonably small networks can't
> use them for free (100 user limit).

Theo Van Dinter wrote:
> Sounds reasonable to me.

Daryl C. W. O'Shea wrote:
> This has been on my mind for a while.  I'd hate to lose accurate scoring 
> on a set of rules that hits such a large proportion of mail.

Justin Mason wrote:
> good point about Spamhaus... 100 user limit is tiny!  We may
> indeed have to do something about that, but I agree with Daryl; the
> Spamhaus rules are very accurate.
Comment 1 Martin Lathoud 2007-09-06 18:05:29 UTC 
In my experience almost all of Spamhaus hits come from their inclusion of
cbl.abuseat.org in xbl, and it would be a good substitute since their terms of
service are not restrictive (see http://cbl.abuseat.org/tandc.html).
Comment 2 Matt Kettler 2007-09-06 18:48:50 UTC 
With regards to CBL, they specifically state that they would prefer users to not
querry CBL directly, but use XBL instead.

It's not in their T&C, however, we should at least open a dialog with CBL before
making that change.

See the "DNSBL Setup Recommendations" section of:

http://cbl.abuseat.org/faq.html

Where it states:
"Generally speaking, we prefer users to use the SpamHaus DNSBL system to get
access to the CBL, instead of the CBL directly. "

And also:

"WARNING: it is CBL policy that spam filter and spam filter service vendors MUST
obtain a paid-for feed from Spamhaus. Filter providers that do not have a
paid-for feed from Spamhaus, or who have not registered for the CBL feed, MAY
find themselves inhibited from obtaining a CBL feed without warning."
Comment 3 Justin Mason 2010-01-27 02:20:49 UTC 
moving most remaining 3.3.0 bugs to 3.3.1 milestone
Comment 4 Justin Mason 2010-01-27 03:16:33 UTC 
reassigning, too
Comment 5 Justin Mason 2010-03-23 16:33:49 UTC 
moving all open 3.3.1 bugs to 3.3.2
Comment 6 Karsten Bräckelmann 2010-03-23 17:42:53 UTC 
Moving back off of Security, which got changed by accident during the mass Target Milestone move.
Comment 7 Kevin A. McGrail 2013-06-21 16:08:16 UTC 
Moving all open bugs where target is defined and 3.4.0 or lower to 3.4.1 target
Comment 8 Kevin A. McGrail 2015-04-12 15:30:38 UTC 
Free for all is not a requirement of the DNSBL policy written after this ticket was open.

See https://wiki.apache.org/spamassassin/DnsBlocklistsInclusionPolicy