OliverScott
Verified User
- Joined
- May 4, 2007
- Messages
- 57
Following a suggestion made on this forum about a year ago I switched one of our servers to using OpenDNS for its name resolution, and noticed a marked improvement in SpamAssassin message scan times (due to the DNSBL and URIBL lookups). It also has the benefit of reducing the load on those people offering free dns based spam filtering services, as OpenDNS opperate as a LARGE DNS cache.
The one thing that you have to do is to turn off several of the OpenDNS features (such as typo correction and their Guide page which is returned when a domain doesn't exist) otherwise DNSBLs and URIBLs don't work.
I noticed this morning that some SPAM was slipping through, and when I checked I found that they were only hitting local SpamAssassin rules and not any of my network tests...
It turns out that OpenDNS have created a new 'feature' called "Enable OpenDNS proxy" (which is somthing to do with searches made from the address bar with google toolbar installed) and have enabled it by default. As soon as I turned this off my SpamAssassin network tests started working again.
I am a bit miffed that they enabled this new 'feature' automatically and without notifying me, but will continue to use their service as it generally does a very good job!
The one thing that you have to do is to turn off several of the OpenDNS features (such as typo correction and their Guide page which is returned when a domain doesn't exist) otherwise DNSBLs and URIBLs don't work.
I noticed this morning that some SPAM was slipping through, and when I checked I found that they were only hitting local SpamAssassin rules and not any of my network tests...
It turns out that OpenDNS have created a new 'feature' called "Enable OpenDNS proxy" (which is somthing to do with searches made from the address bar with google toolbar installed) and have enabled it by default. As soon as I turned this off my SpamAssassin network tests started working again.
I am a bit miffed that they enabled this new 'feature' automatically and without notifying me, but will continue to use their service as it generally does a very good job!