You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Wolfgang Breyha <sa...@blafasel.at> on 2022/10/11 12:36:59 UTC

RCVD_IN_DNSWL_* "unrun" (was: SA 4.0.0-rc3 meta rule results "undefined")

On 11/10/2022 13:29, Henrik K wrote:
> You can also need to use -D rules,rules-all to see any "unrun" rules.

I tried that using "all,rules,rules-all" and I think I found an other 
problem with RCVD_IN_DNSWL* rules.

If I run with a testmail I see:
> # spamassassin -D all,rules,rules-all <test.eml 2>&1|grep RCVD_IN_DNSWL
> Oct 11 14:32:33.399 [1549685] dbg: rules: meta KHOP_HELO_FCRDNS inherits tflag net, depends on __RCVD_IN_DNSWL
> Oct 11 14:32:33.595 [1549685] dbg: dnseval: initialize check_rbl_sub for rule RCVD_IN_DNSWL_NONE, set dnswl-firsttrusted, subtest (?^aa:^127\\.0\\.\\d+\\.0$)
> Oct 11 14:32:33.595 [1549685] dbg: dnseval: initialize check_rbl_sub for rule RCVD_IN_DNSWL_LOW, set dnswl-firsttrusted, subtest (?^aa:^127\\.0\\.\\d+\\.1$)
> Oct 11 14:32:33.595 [1549685] dbg: dnseval: initialize check_rbl_sub for rule RCVD_IN_DNSWL_MED, set dnswl-firsttrusted, subtest (?^aa:^127\\.0\\.\\d+\\.2$)
> Oct 11 14:32:33.595 [1549685] dbg: dnseval: initialize check_rbl_sub for rule RCVD_IN_DNSWL_HI, set dnswl-firsttrusted, subtest (?^aa:^127\\.0\\.\\d+\\.3$)
> Oct 11 14:32:33.595 [1549685] dbg: dnseval: initialize check_rbl_sub for rule RCVD_IN_DNSWL_BLOCKED, set dnswl-firsttrusted, subtest (?^aa:^127\\.0\\.\\d+\\.255$)
> Oct 11 14:32:33.627 [1549685] dbg: rules-all: ran meta rule __RCVD_IN_DNSWL, no hit
> Oct 11 14:32:34.462 [1549685] dbg: rules-all: unrun dependencies prevented meta KAM_BAD_DNSWL from running: KAM_MESSAGE_EMAILBL_PCCC, RCVD_IN_DNSWL_HI, RCVD_IN_HOSTKARMA_W
> Oct 11 14:32:34.464 [1549685] dbg: rules-all: unrun dependencies prevented meta KAM_QUITE_BAD_DNSWL from running: KAM_MESSAGE_EMAILBL_PCCC, RCVD_IN_DNSWL_HI, RCVD_IN_HOSTKARMA_W
> Oct 11 14:32:34.466 [1549685] dbg: rules-all: unrun dependencies prevented meta XPRIO from running: RCVD_IN_DNSWL_NONE
> Oct 11 14:32:34.466 [1549685] dbg: rules-all: unrun dependencies prevented meta WLCOMPENSATE1 from running: RCVD_IN_DNSWL_MED
> Oct 11 14:32:34.466 [1549685] dbg: rules-all: unrun dependencies prevented meta WLCOMPENSATE2 from running: RCVD_IN_DNSWL_LOW
> Oct 11 14:32:34.466 [1549685] dbg: rules-all: unrun dependencies prevented meta WLCOMPENSATE4 from running: RCVD_IN_DNSWL_HI

This looks like __RCVD_IN_DNSWL gets evaluated, but not hit. But 
RCVD_IN_DNSWL_* are "unrun", what looks very odd.

Greetings, Wolfgang

Re: RCVD_IN_DNSWL_* "unrun" (was: SA 4.0.0-rc3 meta rule results "undefined")

Posted by Wolfgang Breyha <sa...@blafasel.at>.
On 11/10/2022 15:08, Henrik K wrote:
> This is because __RCVD_IN_DNSWL is not supposed to be a meta.  KAM channel
> overrides it to "disable" the rule.  I just posted on the list about that..

Oh, right! Thanks for the pointer. Didn't catch up to this point yet.

Greetings, Wolfgang

Re: RCVD_IN_DNSWL_* "unrun" (was: SA 4.0.0-rc3 meta rule results "undefined")

Posted by Henrik K <he...@hege.li>.
On Tue, Oct 11, 2022 at 02:36:59PM +0200, Wolfgang Breyha wrote:
> On 11/10/2022 13:29, Henrik K wrote:
> > You can also need to use -D rules,rules-all to see any "unrun" rules.
> 
> I tried that using "all,rules,rules-all" and I think I found an other
> problem with RCVD_IN_DNSWL* rules.
> 
> If I run with a testmail I see:
> > # spamassassin -D all,rules,rules-all <test.eml 2>&1|grep RCVD_IN_DNSWL
> > Oct 11 14:32:33.399 [1549685] dbg: rules: meta KHOP_HELO_FCRDNS inherits tflag net, depends on __RCVD_IN_DNSWL
> > Oct 11 14:32:33.595 [1549685] dbg: dnseval: initialize check_rbl_sub for rule RCVD_IN_DNSWL_NONE, set dnswl-firsttrusted, subtest (?^aa:^127\\.0\\.\\d+\\.0$)
> > Oct 11 14:32:33.595 [1549685] dbg: dnseval: initialize check_rbl_sub for rule RCVD_IN_DNSWL_LOW, set dnswl-firsttrusted, subtest (?^aa:^127\\.0\\.\\d+\\.1$)
> > Oct 11 14:32:33.595 [1549685] dbg: dnseval: initialize check_rbl_sub for rule RCVD_IN_DNSWL_MED, set dnswl-firsttrusted, subtest (?^aa:^127\\.0\\.\\d+\\.2$)
> > Oct 11 14:32:33.595 [1549685] dbg: dnseval: initialize check_rbl_sub for rule RCVD_IN_DNSWL_HI, set dnswl-firsttrusted, subtest (?^aa:^127\\.0\\.\\d+\\.3$)
> > Oct 11 14:32:33.595 [1549685] dbg: dnseval: initialize check_rbl_sub for rule RCVD_IN_DNSWL_BLOCKED, set dnswl-firsttrusted, subtest (?^aa:^127\\.0\\.\\d+\\.255$)
> > Oct 11 14:32:33.627 [1549685] dbg: rules-all: ran meta rule __RCVD_IN_DNSWL, no hit
> > Oct 11 14:32:34.462 [1549685] dbg: rules-all: unrun dependencies prevented meta KAM_BAD_DNSWL from running: KAM_MESSAGE_EMAILBL_PCCC, RCVD_IN_DNSWL_HI, RCVD_IN_HOSTKARMA_W
> > Oct 11 14:32:34.464 [1549685] dbg: rules-all: unrun dependencies prevented meta KAM_QUITE_BAD_DNSWL from running: KAM_MESSAGE_EMAILBL_PCCC, RCVD_IN_DNSWL_HI, RCVD_IN_HOSTKARMA_W
> > Oct 11 14:32:34.466 [1549685] dbg: rules-all: unrun dependencies prevented meta XPRIO from running: RCVD_IN_DNSWL_NONE
> > Oct 11 14:32:34.466 [1549685] dbg: rules-all: unrun dependencies prevented meta WLCOMPENSATE1 from running: RCVD_IN_DNSWL_MED
> > Oct 11 14:32:34.466 [1549685] dbg: rules-all: unrun dependencies prevented meta WLCOMPENSATE2 from running: RCVD_IN_DNSWL_LOW
> > Oct 11 14:32:34.466 [1549685] dbg: rules-all: unrun dependencies prevented meta WLCOMPENSATE4 from running: RCVD_IN_DNSWL_HI
> 
> This looks like __RCVD_IN_DNSWL gets evaluated, but not hit. But
> RCVD_IN_DNSWL_* are "unrun", what looks very odd.

This is because __RCVD_IN_DNSWL is not supposed to be a meta.  KAM channel
overrides it to "disable" the rule.  I just posted on the list about that..