You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@issues.apache.org on 2010/07/20 23:25:18 UTC

[Bug 6465] New: RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6465

           Summary: RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16
           Product: Spamassassin
           Version: 3.3.1
          Platform: PC
        OS/Version: FreeBSD
            Status: NEW
          Severity: major
          Priority: P2
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: dan@more.net


At some point 169.254.0.0/16 was added to the RCVD_ILLEGAL_IP rule.  It was not
there on May 20, 2010 (version 3.3.0) but it is there now.

According to IANA, 169.254.0.0/16 is the "link local" block.  It is allocated
for communication between hosts on a single link.  I'm not sure that makes it
invalid.

I've had two false positives reported to me this week.  It appears that
Microsoft Exchange clusters use this range. Here is a (sanitized) received
header from a non-spam test message sent to me that matched the rule:

Received: from email04.university.edu ([169.254.1.144]) by
 NHUB02.university.edu ([209.xxx.xxx.xxx]) with mapi; Tue, 20 Jul 2010
 14:05:39 -0500

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6465] RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6465

Jason Long <ja...@long.name> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jason@long.name

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6465] RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6465

Matt Kettler <mk...@verizon.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mkettler_sa@verizon.net

--- Comment #7 from Matt Kettler <mk...@verizon.net> 2010-09-05 00:16:44 UTC ---
+1 for the fix to be committed to 3.3

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6465] RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6465

Mark Martinec <Ma...@ijs.si> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|                            |6498

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6465] RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6465

Mark Martinec <Ma...@ijs.si> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|Undefined                   |3.3.2
  Status Whiteboard|needs 2 votes for 3.3       |can be committed

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6465] RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6465

dan@more.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dan@more.net

--- Comment #2 from dan@more.net 2010-07-20 17:57:40 EDT ---
(In reply to comment #1)
> I suspect this is a DUP of bug 6460

Bug 6460 is about named hosts that start with a number matching this rule by
accident.   This is about the 169.254 range which is being matched on purpose.
I do not believe they are duplicates, except that they both cause false
positives.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6465] RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6465

Karsten Bräckelmann <gu...@rudersport.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Status Whiteboard|                            |needs 2 votes for 3.3

--- Comment #4 from Karsten Bräckelmann <gu...@rudersport.de> 2010-07-23 11:05:33 EDT ---
Committed to trunk, along with the fix for bug 6460. Please vote for 3.3.

Ensure RCVD_ILLEGAL_IP only matches on IPs, bug 6460.  Remove 169.254/16
assigned as "link local" block, bug 6465.

Sending        rules/20_head_tests.cf
Transmitting file data .
Committed revision 967120.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6465] RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6465

Mark Martinec <Ma...@ijs.si> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #8 from Mark Martinec <Ma...@ijs.si> 2011-01-07 14:51:16 UTC ---
It was fixed in Bug 6460 comment 15 for 3.3 and trunk.
Closing.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6465] RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6465

Tony Finch <do...@dotat.at> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dot@dotat.at

--- Comment #6 from Tony Finch <do...@dotat.at> 2010-08-11 09:06:43 UTC ---
+1 for the fix.

I have encountered this bug too. 169.254.0.0 should be treated like an RFC 1918
address range - its purpose is similar though the way addresses are allocated
is different.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6465] RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6465

Karsten Bräckelmann <gu...@rudersport.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |stefan.dreyer+sa@ddnetservi
                   |                            |ce.net

--- Comment #5 from Karsten Bräckelmann <gu...@rudersport.de> 2010-08-04 10:55:16 EDT ---
*** Bug 6475 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6465] RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6465

--- Comment #3 from Karsten Bräckelmann <gu...@rudersport.de> 2010-07-23 10:15:11 EDT ---
Huh, fixing this would be trivial. After all, /169\.254/ is mentioned
explicitly in the alternation, so it just would have to be removed.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6465] RCVD_ILLEGAL_IP incorrectly matches 169.254.0.0/16

Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6465

Phil Randal <ph...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |phil.randal@gmail.com

--- Comment #1 from Phil Randal <ph...@gmail.com> 2010-07-20 17:36:15 EDT ---
I suspect this is a DUP of bug 6460

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.