[Bug 7242] URIBL_SBL and URIBL_SBL_A doing each other's lookups

[bu...@bugzilla.spamassassin.org]

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7242

--- Comment #4 from Kevin A. McGrail <km...@pccc.com> ---
Nick Edwards posted something similar:

Take postfix.org for example, it has no A record, so this check should
return NXDOMAIN and therefore not score the mail with a positive
value.

However, it does, so, I either screwed up something in the rule :

uridnsbl        ATQ_URI2 snowshoers.int. A
body            ATQ_URI2 eval:check_uridnsbl('ATQ_URI2')
describe        ATQ_URI2 URL's domain A record listed in snowshoe netblocks
score           ATQ_URI2 3.0
tflags          ATQ_URI2 net a

or spamassassins  lookup is over bearing?

The list  in snowshoers.int contains about 400  /24's so removing one
at a time is not feasable, but, as indicated, postifx.org has no A
record so this shojldnt be an issue, I did check the IP's of
www.postifx.org both of them are not in any netblock.

So how can it be it gets tagged as being in it?
It can not be a nxdomain false in code, since undernet.org has no A
records and it passes fine without tagging/scoring.



And Noel Butler on the mailing list wrote:

         If so, I think I see the problem, SA is using  -ANY in its lookup,
         not the A that you want (I'm guessing without looking into code,
         I'm just back from holidays so bit busy at home), postfix ns4 has
         an IP in a /24 list from HOSTI-20 173.244.206.0/24 which was added
         4 weeks ago by looks of it, its marked "spam multiple junk domains"

         So it seems SA's eval code does have an error.   

The rule might be requesting an A but the code is firing or returning ANY
causing a false hit perhaps?


RW than pointed out this sounded similar to this bug.

-- 
You are receiving this mail because:
You are the assignee for the bug.