You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2008/09/07 03:29:16 UTC

[Bug 5970] New: USER_IN_DEF_WHITELIST appears once and cannot be reproduced

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5970

           Summary: USER_IN_DEF_WHITELIST appears once and cannot be
                    reproduced
           Product: Spamassassin
           Version: 3.2.5
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: trivial
          Priority: P5
         Component: spamassassin
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: jidanni@jidanni.org


Created an attachment (id=4362)
 --> (https://issues.apache.org/SpamAssassin/attachment.cgi?id=4362)
spam

Odd, I was going to complain about the value of pre-defined whitelists, but
when I use -d and then -t, I can't get that tag, USER_IN_DEF_WHITELIST, back
on. Odd.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5970] USER_IN_DEF_WHITELIST appears once and cannot be reproduced

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5970





--- Comment #3 from Daryl C. W. O'Shea <sp...@dostech.ca>  2008-09-07 11:57:35 PST ---
Would you be able to provide a sample message Greg?


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5970] USER_IN_DEF_WHITELIST appears once and cannot be reproduced

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5970





--- Comment #4 from Justin Mason <jm...@jmason.org>  2008-09-08 02:25:48 PST ---
we read the env sender from the Return-Path: (etc.) headers, see
Mail::SpamAssassin::Conf manpage, 'envelope_sender_header' section, for
details.  so it should be entirely feasible to reproduce from a file.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5970] USER_IN_DEF_WHITELIST appears once and cannot be reproduced

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5970





--- Comment #5 from Greg Troxel <gd...@ir.bbn.com>  2008-09-08 05:57:28 PST ---
Created an attachment (id=4363)
 --> (https://issues.apache.org/SpamAssassin/attachment.cgi?id=4363)
spample where USER_IN_DEF_WHITELIST appears

This attachment is the contents of the *Article* buffer in gnus from a spam
message, exactly.   One can see that USER_IN_DEF_WHITELIST appears, and running
spamassassin  with -D -t I get:
[8132] dbg: rules: address yahoo-dev-null@yahoo-inc.com matches
(def_)whitelist_from_rcvd ^.*\@yahoo\-inc\.com$ yahoo.com
[8132] dbg: rules: ran eval rule USER_IN_DEF_WHITELIST ======> got hit (1)

Perhaps we should remove the ".*@yahoo-inc yahoo.com" pair.

(As far as I can tell, there is nothing mysterious going on - the only problem
appears to be that yahoo is doing inadequate evelope from filtering on
user-generated mail.)


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5970] USER_IN_DEF_WHITELIST appears once and cannot be reproduced

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5970


Greg Troxel <gd...@ir.bbn.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |gdt@ir.bbn.com




--- Comment #2 from Greg Troxel <gd...@ir.bbn.com>  2008-09-07 06:37:04 PST ---
I got a spam which is very similar - it's the envelope sender that is in the
default whitelitst.  I wrote to yahoo abuse and askeed them to explain how they
prevent their users from spamming with this envelope address, and.... have
heard nothing back.

As I understand this rule, to trigger the mail has to have the
yahoo-dev-null@yahoo-inc.com from address (body or envelope) and simultaneously
have been Received: by a yahoo.com host.  Obviously anyone can forge From
addresses, so this only makes sense if yahoo prevents spam from this address
from being emitted by all hosts in yahoo.com.

Given that this address is showing up in spam, yahoo obviously is not
preventing the address going out from them.  I think this entry should be
removed from the default whitelist.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5970] perhaps remove yahoo-inc yahoo.com pair from pre-defined whitelists

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5970


Dan Jacobson <ji...@jidanni.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|USER_IN_DEF_WHITELIST       |perhaps remove yahoo-inc
                   |appears once and cannot be  |yahoo.com pair from pre-
                   |reproduced                  |defined whitelists




--- Comment #6 from Dan Jacobson <ji...@jidanni.org>  2008-09-09 19:07:55 PST ---
OK, my problem seems unreproducable oddly these days, so retitling this bug to
the remaining problem: remove those yahoo entries from the predefined whitelist
or not.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5970] USER_IN_DEF_WHITELIST appears once and cannot be reproduced

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5970





--- Comment #1 from Dan Jacobson <ji...@jidanni.org>  2008-09-06 18:31:21 PST ---
Oh, I bet it's how the envelope header hits spamassassin. Different from a
file...


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.