mahara-contributors team mailing list archive

[Aaron Wells <811394@xxxxxxxxxxxxxxxxxx>]

Hi David,

Looking at the code, the problem is that even if you turn off the
Spamhaus and Surbl blacklists, "black.uribl.com" is hard-coded in place
and can't be disabled.

If you don't want to run any blacklist checks, then you have two
possible workarounds:

1. Set your anti-spam to "Simple". The only thing that Advanced does
other than check those blacklists, is that it runs some DNS checks
against any email addresses in the message.

2. Hack the file lib/antispam/AdvancedSpamTrap.php to remove
'black.uribl.com' from the list.

In the longer term... probably we should change the config for this,
because it is misleading. I think probably what we should do is move the
blacklists into a config-defaults.php setting. I'm guessing probably the
reason it was done the way it is, is because dbl.spamhaus.org and
multi.surbl.com have user agreements that you're supposed to look at
before enabling them. But having tickboxes for those certainly gives the
user the impression that unticking them should disable all blacklists,
when in fact that is not the case.

** Changed in: mahara
       Status: Invalid => Confirmed

** Tags added: snack-sized

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/811394

Title:
  A url in this field contains the blacklisted domain ...'

Status in Mahara ePortfolio:
  Confirmed

Bug description:
  1.4
  Mysql
  Linux

  When posting in a forum in a 1.4 I get this message when including
  links to external sites and strangely enough to internal files too. 'A
  url in this field contains the blacklisted domain ...' From doing some
  searches, at least two domains were not blacklisted from what I could
  tell.The problem is that it wont allow me to save the post.

  In the site security section and both blacklist options not enabled,
  when I change the spam setting from 'advanced' to 'none' the message
  gets posted with the URLs in question.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/811394/+subscriptions