[Bug 6518] Implement a general purpose Plugin::AskDNS, makes Spamhaus DWL possible

[bu...@bugzilla.spamassassin.org]

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6518

Mark Martinec <Ma...@ijs.si> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #5 from Mark Martinec <Ma...@ijs.si> 2011-06-20 18:46:16 UTC ---
One enhancement to the AskDNS plugin, and two minor tweaks:

trunk:
- Bug 6518: AskDNS: allow a list of rr_types (including ANY) in askdns
directive;
- set_tag tweaks in DNS and ASN plugins: make use of a listref as a tag value;
- let URIDNSBL make available its list of URI hosts and domains as;
  Sending lib/Mail/SpamAssassin/PerMsgStatus.pm
  Sending lib/Mail/SpamAssassin/Plugin/ASN.pm
  Sending lib/Mail/SpamAssassin/Plugin/AskDNS.pm
  Sending lib/Mail/SpamAssassin/Plugin/DKIM.pm
  Sending lib/Mail/SpamAssassin/Plugin/URIDNSBL.pm
Committed revision 1137734.


This makes it possible to make rules to query for existence in DNS
of domain names or a host names as found in URIs. For example:

  askdns L_URI_NXHOST      _URIHOSTS_    A,AAAA [NXDOMAIN]
  askdns L_URI_NXDOMAIN    _URIDOMAINS_  ANY [NXDOMAIN]
  askdns L_URI_NXDOMAIN_NS _URIDOMAINS_  NS [NXDOMAIN]

As it turns out from a bit of watching our logs, seems the
M::S::PerMsgStatus::get_uri_detail_list() is overly aggressive in
finding URIs in mail, python filenames end up as Paraguayan domains,
and perl filenames as Polish domains. Also spammers and half-literate
users often leave out a space after a fullstop, which makes the last
word of a sentence join with the first word of the next sentence
separated by a dot, which is often picked up as an URI. Anyway, this
is unrelated (perhaps a subject for some other but report) - I just
wanted to illustrate the first impression with the above experimental
rules.

The AskDNS plugin is mostly complete now - there may be a tweak or
two still to come, bot nothing major. As this PR mainly serves
documentation purposes, I'll just close it now.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.