You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2005/07/24 12:10:17 UTC
[Bug 4500] New: new way to skip URIBL tests
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
Summary: new way to skip URIBL tests
Product: Spamassassin
Version: 3.1.0
Platform: Other
OS/Version: other
Status: NEW
Severity: normal
Priority: P5
Component: Rules (Eval Tests)
AssignedTo: dev@spamassassin.apache.org
ReportedBy: mbr@freebsd.org
If one does just add:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: base64
but does not really encode the body, URIBL tests (any
maybe other tests) are skipped. Body Tests still seem to
work.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
------- Additional Comments From mbr@freebsd.org 2005-07-24 05:43 -------
Created an attachment (id=3038)
--> (http://bugzilla.spamassassin.org/attachment.cgi?id=3038&action=view)
First workaround
This is a workaround to deal with the problem. A better way would be to
check if the encoded part really matches some basic base64 criterias. If
not, it should not be encoded.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
sidney@sidney.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |WORKSFORME
------- Additional Comments From sidney@sidney.com 2005-07-24 11:44 -------
SquirrelMail (a web mail client) works ok and so does ThunderBird, i.e., they
display gibberish.
This really doesn't seem like anything useful to a spammer.
I'm going ahead and closing it as WFM as Theo suggested.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
------- Additional Comments From felicity@apache.org 2005-07-24 10:52 -------
Subject: Re: new way to skip URIBL tests
On Sun, Jul 24, 2005 at 10:45:31AM -0700, bugzilla-daemon@bugzilla.spamassassin.org wrote:
> MUAs that do things the right way:
> mutt
> Outlook Web Access (via Exchange)
> Outlook Express
> MS Entourage
Also pine FWIW.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
------- Additional Comments From mbr@freebsd.org 2005-07-24 03:55 -------
The mail is rendered correctly in most MUAs and also Webmails.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
------- Additional Comments From mbr@freebsd.org 2005-07-24 04:54 -------
It looks like spamassassin decodes the body everytime, even
if it is not encoded at all. The decoded output is garbage,
of course and does not contain any URIs anymore.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
------- Additional Comments From bugzilla.spamassassin.org@iloaf.com 2005-07-24 04:17 -------
Hi. The URI isn't even parsed.
[20196] dbg: uri: running uri tests; score so far=0.1961
[20196] dbg: uri: running uri tests; score so far=2.7651
[20196] dbg: uri: running uri tests; score so far=2.7651
[20196] dbg: uri: running uri tests; score so far=0.0181
[20196] dbg: uri: running uri tests; score so far=2.6972
[20196] dbg: uri: running uri tests; score so far=2.6972
The correct output:
[20187] dbg: uri: running uri tests; score so far=0.1961
[20187] dbg: uri: running uri tests; score so far=2.7651
[20187] dbg: uri: running uri tests; score so far=2.7651
[20187] dbg: uri: parsed uri found, http://optinrealbig.com/
[20187] dbg: uri: cleaned parsed uri, http://optinrealbig.com/
[20187] dbg: uri: parsed domain, optinrealbig.com
[20187] dbg: uri: running uri tests; score so far=0.0181
[20187] dbg: uri: running uri tests; score so far=3.9471
[20187] dbg: uri: running uri tests; score so far=3.9471
Hope this helps somehow.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
------- Additional Comments From mbr@freebsd.org 2005-07-24 10:54 -------
The webmail I've tried (and where it works) is uebimiau (http://www.uebimiau.org).
I've just tested pine and it does display binary gibberish.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
------- Additional Comments From mbr@freebsd.org 2005-07-24 03:13 -------
Created an attachment (id=3035)
--> (http://bugzilla.spamassassin.org/attachment.cgi?id=3035&action=view)
sample mail
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
------- Additional Comments From mbr@freebsd.org 2005-07-24 12:28 -------
Agreed,
ok, so I'm going to make a pyzor PR, because this one
is a problem. I've seen many more messages with some
strange encoding etc which makes pyzor fail.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
mbr@freebsd.org changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #3037|Patch for fix pyzor |Patch to fix pyzor
description| |
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
------- Additional Comments From mbr@freebsd.org 2005-07-24 03:41 -------
Btw, Pyzor is skipped too:
[15867] warn: pyzor: check failed: internal error
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
------- Additional Comments From felicity@apache.org 2005-07-24 10:45 -------
Thanks for the ticket, however I have some comments.
1) the Pyzor patch is best sent to the Pyzor folks, since there's nothing we can
do about their code.
2) The mail clients I've tried see binary gibberish since the mail states that
it's encoded. I'm not sure which clients display the text, but those are the
ones that are broken...
MUAs that do things the right way:
mutt
Outlook Web Access (via Exchange)
Outlook Express
MS Entourage
3) There's really no good way that I know of to determine if you should decode
based on looking at the message. If you just look for properly formatted
base64, someone could easily write malformed base64 which will decode in clients
but not be scanned. Also, you can't look at the decoded data and say that it's
not all 32-126 ASCII so it's bad, since you'd expect base64 to be used for 8-bit
messages.
I recommend closing this ticket as WFM.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4500] new way to skip URIBL tests
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4500
------- Additional Comments From mbr@freebsd.org 2005-07-24 03:49 -------
Created an attachment (id=3037)
--> (http://bugzilla.spamassassin.org/attachment.cgi?id=3037&action=view)
Patch for fix pyzor
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.