URI canonicalization whitelist

[Michael Orlitzky <mi...@orlitzky.com>]

Is there an easy way to skip,

  dbg: uri: added host: from.condocerts.com domain: condocerts.com
  dbg: dns: found CNAME sparkpostmail.com for host from.condocerts.com
  dbg: uri: canonicalizing parsed uri: sparkpostmail.com
  dbg: uri: cleaned uri: sparkpostmail.com

for certain URIs?

Ideally condocerts.com would not host their subdomains with well-known
spammers, but that's not up to me. Instead what I think I'd like to do
is not canonicalize condocerts.com.

Re: URI canonicalization whitelist

[Greg Troxel <gd...@lexort.com>]

Michael Orlitzky <mi...@orlitzky.com> writes:

> On 2026-06-30 15:35:01, Ruud van den Hout wrote:
>> For example: uridnsbl_skip_domain ?
>
> Applies to the canonicalized URI, and we don't want to skip the
> canonicalized URI because it *is* a spam domain.

I guess then you can add a feature

  uridnsbl_skip_pre_canonicalization

with a small matter of writing docs, perl and tests, and send in a patch.


Or you can just hand-hack it into your installed SA with a
strategically-placed if.

Re: URI canonicalization whitelist

[Michael Orlitzky <mi...@orlitzky.com>]

On 2026-06-30 15:35:01, Ruud van den Hout wrote:
> Did you try the Docs?
> https://spamassassin.apache.org/full/4.0.x/doc/

I've read the docs for the features that I know about, but don't know
what I don't know.


> For example: uridnsbl_skip_domain ?

Applies to the canonicalized URI, and we don't want to skip the
canonicalized URI because it *is* a spam domain.

Re: URI canonicalization whitelist

[Ruud van den Hout <ru...@gmail.com>]

Did you try the Docs?
https://spamassassin.apache.org/full/4.0.x/doc/

For example: uridnsbl_skip_domain ?

Op di 30 jun 2026 om 15:32 schreef Michael Orlitzky <mi...@orlitzky.com>:

> On 2026-06-30 11:26:03, Ruud van den Hout wrote:
> > whitelist the sender then!?
>
> There are thousands of randomly-located senders with this URI in their
> messages :)
>
> One of our customers is a property management company that uses
> condocerts. Anyone who lives at one of their communities or in one of
> their buildings will get messages with condocerts URIs in them, and
> when they reply/forward to the property management company, our
> spamassassin sees the URI and resolves it to sparkpost.
>

Re: URI canonicalization whitelist

[Michael Orlitzky <mi...@orlitzky.com>]

On 2026-06-30 11:26:03, Ruud van den Hout wrote:
> whitelist the sender then!?

There are thousands of randomly-located senders with this URI in their
messages :)

One of our customers is a property management company that uses
condocerts. Anyone who lives at one of their communities or in one of
their buildings will get messages with condocerts URIs in them, and
when they reply/forward to the property management company, our
spamassassin sees the URI and resolves it to sparkpost.

Re: URI canonicalization whitelist

[Ruud van den Hout <ru...@gmail.com>]

whitelist the sender then!?

Op ma 29 jun 2026 om 17:03 schreef Michael Orlitzky <mi...@orlitzky.com>:

> On 2026-06-29 15:34:05, Ruud van den Hout wrote:
> > why not just add condocerts.com to welcomelist_auth or welcomelist_from?
>
> They're not the sender, it's a URI in the body.
>

Re: URI canonicalization whitelist

[Michael Orlitzky <mi...@orlitzky.com>]

On 2026-06-29 15:34:05, Ruud van den Hout wrote:
> why not just add condocerts.com to welcomelist_auth or welcomelist_from?

They're not the sender, it's a URI in the body.

Re: URI canonicalization whitelist

[Ruud van den Hout <ru...@gmail.com>]

why not just add condocerts.com to welcomelist_auth or welcomelist_from?

Op ma 29 jun 2026 om 14:52 schreef Michael Orlitzky <mi...@orlitzky.com>:

> Is there an easy way to skip,
>
>   dbg: uri: added host: from.condocerts.com domain: condocerts.com
>   dbg: dns: found CNAME sparkpostmail.com for host from.condocerts.com
>   dbg: uri: canonicalizing parsed uri: sparkpostmail.com
>   dbg: uri: cleaned uri: sparkpostmail.com
>
> for certain URIs?
>
> Ideally condocerts.com would not host their subdomains with well-known
> spammers, but that's not up to me. Instead what I think I'd like to do
> is not canonicalize condocerts.com.
>