New installs start with the hashed-address blocklist off, and DNSBL zones read right

jcoffey-dev commented

2026-09-28 17:21:20 +00:00

Owner

Personal-data catalog D5: a new install switches STWT_MSBL_EBL_EMAIL off after its first rules load (once; existing servers unchanged). Also: the inventory reads DNSBL zones from quoted literals in every branch of the zone expression.

Tested: unit test, compliance system test, system suite, fork checks.

Personal-data catalog D5: a new install switches STWT_MSBL_EBL_EMAIL off after its first rules load (once; existing servers unchanged). Also: the inventory reads DNSBL zones from quoted literals in every branch of the zone expression. Tested: unit test, compliance system test, system suite, fork checks.

jcoffey-dev added 1 commit 2026-09-28 17:21:20 +00:00

New installs start with the hashed-address blocklist off, and DNSBL zones read right

ci / fork-checks (pull_request) Successful in 1m3s

Details

ci / build (pull_request) Successful in 1h11m16s

Details

b20b09f81a

Personal-data catalog spec, default D5 (settled 2026-09-28; built after
the v0.16.24 import's spam-rules loader landed). msbl.org's EBL is sent
a SHA-1 of every email address it's asked about. A new install's first
boot now leaves a note, and the rules update, once the bundled rules
are in, switches STWT_MSBL_EBL_EMAIL off and forgets the note, so it
happens once; the loader keeps that switch through later updates. An
existing server has no note and keeps every blocklist as it is.

Also fixes the data inventory's DNSBL endpoints: a zone is an
expression (`ip_reverse + '.zen.spamhaus.org'`, conditional branches,
`hash(email, 'sha1') + '.ebl.msbl.org'`), and the zone names are now
the quoted literals that start with a dot, from every branch, rather
than the expression's text.

Tested: unit test for the zone rule; the compliance system test (no
note, no change; the inventory lists ebl.msbl.org, not a hash; with the
note the blocklist goes off; the note works once); the system suite;
fork checks.

jcoffey-dev merged commit ac204078eb into main

2026-09-28 18:32:41 +00:00

jcoffey-dev deleted branch feature/d5-msbl-off

2026-09-28 18:32:41 +00:00

jcoffey-dev referenced this issue from a commit

2026-09-28 19:22:38 +00:00

Release 2026.9.28.4

jcoffey-dev referenced this pull request

2026-09-28 19:22:39 +00:00

Release 2026.9.28.4 #94

New installs start with the hashed-address blocklist off, and DNSBL zones read right #90