[Bug 4751] New: RBL lookups are always skipped under some conditions

[bu...@bugzilla.spamassassin.org]

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4751

           Summary: RBL lookups are always skipped under some conditions
           Product: Spamassassin
           Version: 3.1.0
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P5
         Component: spamassassin
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: arvel@altn.com


SA parses Received headers in an attempt to do an RBL lookup on the 'from' host.
 However, within SA, RBL lookups are skipped if the 'by' host resolves to a
private IP (such as 10.<whatever>).  Since any resolution of the 'by' host
inside our network will always net a private IP, RBL lookups are skipped.  

I imagine it to be a very common setup that IPs resolve to private ranges inside
the local network and public ranges only from the outside.  Thus, any SA scans
taking place within such a network will always skip RBL checks.

An example:

Received: from remote-host ([a.b.c.d]) by sub.domain.com ([e.f.g.h])
    // etc..

SpamAssassin ignores [e.f.g.h] and does an lookup on sub.domain.com to get it's
IP.  Inside the network where SpamAssassin is running the ip resolves to
10.0.0.1 (for example).  There is a implicit trust of all private networks and
since trusted ips don't do RBL lookups this is the problem.

-- 
Arvel Hathcock
arvel@altn.com



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4751] RBL lookups are always skipped under some conditions

[bu...@bugzilla.spamassassin.org]

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4751


spamassassin@dostech.ca changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WORKSFORME




------- Additional Comments From spamassassin@dostech.ca  2006-01-10 04:59 -------
I assume you're trying to (or actually, are) avoid configuring trusted_networks
in your MDaemon integration of SpamAssassin.  It won't work (and is why I
recommend people to just call spamc from a Content-Filter rule... unfortunately
you can't reject mail that way though).

See http://wiki.apache.org/spamassassin/TrustPath for why.


I'm going to close the bug on the assumption that I've understood what you're
reporting and realize that there's nothing we can do about it.  Feel free to
re-open if I'm incorrect.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.