You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2011/09/19 23:36:02 UTC

[Bug 6662] New: uridnsbl_skip_domain isn't preventing lookups via urirhssub

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6662

             Bug #: 6662
           Summary: uridnsbl_skip_domain isn't preventing lookups via
                    urirhssub
           Product: Spamassassin
           Version: SVN Trunk (Latest Devel Version)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Rules (Eval Tests)
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: Darxus@ChaosReigns.com
    Classification: Unclassified


Created attachment 4960
  --> https://issues.apache.org/SpamAssassin/attachment.cgi?id=4960
Example email hitting URIBL_WS_SURBL

Rules currently include:
25_uribl.cf:uridnsbl_skip_domain juno.com kernel.org livejournal.com lycos.com

Yet the attachment still hits URIBL_WS_SURBL via the rule:
25_uribl.cf:urirhssub       URIBL_WS_SURBL  multi.surbl.org.        A   4


Using the attached example with trunk:

spamassassin -D 2>&1 | grep multi.surbl | grep starting | less

Sep 19 17:22:39.564 [9037] dbg: async: starting: URI-DNSBL,
DNSBL:multi.surbl.org.:news.livejournal.com (timeout 15.0s, min 3.0s)
Sep 19 17:22:39.569 [9037] dbg: async: starting: URI-DNSBL,
DNSBL:multi.surbl.org.:www.livejournal.com (timeout 15.0s, min 3.0s)

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6662] uridnsbl_skip_domain isn't preventing lookups via urirhssub

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6662

--- Comment #3 from Mark Martinec <Ma...@ijs.si> 2011-09-20 14:54:01 UTC ---
> Rules currently include:
>  25_uribl.cf:uridnsbl_skip_domain juno.com kernel.org livejournal.com ...
> Yet the attachment still hits [...]
> DNSBL:multi.surbl.org.:news.livejournal.com (timeout 15.0s, min 3.0s)

The URI has news.livejournal.com, not livejournal.com.
The uridnsbl_skip_domain does include livejournal.com
but not the news.livejournal.com.

The source of this trouble is 20_aux_tlds.cf which contains:

  util_rb_2tld livejournal.com

declaring the livejournal.com to be a registrar boundary, so
the 'news' in news.livejournal.com is not considered a hostname
by Mail::SpamAssassin::Util::RegistrarBoundaries::split_domain(),
it returns an empty host name and news.livejournal.com as a
domain name.

Don't know why livejournal.com is in util_rb_2tld and where the logic
behind it went wrong.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6662] uridnsbl_skip_domain isn't preventing lookups via urirhssub

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6662

--- Comment #9 from AXB <ax...@gmail.com> 2011-09-26 17:58:35 UTC ---
(In reply to comment #8)
> (In reply to comment #7)
> > (In reply to comment #5)
> > > So what is the verdict on this? Close as INVALID, or change the
> > > subject and discuss presence of livejournal.com in util_rb_2tld ?
> > 
> > close as invalid if none can show a spam content on livejournal.com
> 
> I have 49 *.livejournal.com URIs listed in my local URI blacklist, just from
> customer missed-spam reports this year alone.  Looking back at the dates these
> were added, there was a wave in February/March, and a handful this month.  If
> livejournal.com gets removed from util_rb_2tld, I'll be adding it back locally.

don't worry.. it won't be removed

> 
> I suggest adding news.livejournal.com, www.livejournal.com to
> uridnsbl_skip_domain, along with any other fully-owned-by-LJ URIs they use in
> their mail.

will be considered

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6662] uridnsbl_skip_domain isn't preventing lookups via urirhssub

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6662

Mark Martinec <Ma...@ijs.si> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|Undefined                   |3.4.0

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6662] uridnsbl_skip_domain isn't preventing lookups via urirhssub

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6662

--- Comment #2 from AXB <ax...@gmail.com> 2011-09-20 05:08:39 UTC ---
ever though about the fact that google's DNS may be ACL'd by SURBL?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6662] uridnsbl_skip_domain isn't preventing lookups via urirhssub

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6662

Kevin A. McGrail <km...@pccc.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kmcgrail@pccc.com
   Target Milestone|3.4.0                       |3.4.1

--- Comment #10 from Kevin A. McGrail <km...@pccc.com> ---
Moving all open bugs where target is defined and 3.4.0 or lower to 3.4.1 target

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 6662] uridnsbl_skip_domain isn't preventing lookups via urirhssub

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6662

--- Comment #7 from Benny Pedersen <me...@junc.org> 2011-09-24 06:05:24 UTC ---
(In reply to comment #5)
> So what is the verdict on this? Close as INVALID, or change the
> subject and discuss presence of livejournal.com in util_rb_2tld ?

close as invalid if none can show a spam content on livejournal.com

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6662] uridnsbl_skip_domain isn't preventing lookups via urirhssub

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6662

--- Comment #5 from Mark Martinec <Ma...@ijs.si> 2011-09-24 01:39:30 UTC ---
So what is the verdict on this? Close as INVALID, or change the
subject and discuss presence of livejournal.com in util_rb_2tld ?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6662] uridnsbl_skip_domain isn't preventing lookups via urirhssub

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6662

--- Comment #4 from AXB <ax...@gmail.com> 2011-09-20 14:59:16 UTC ---
> Don't know why livejournal.com is in util_rb_2tld and where the logic
> behind it went wrong.

livejournal.com was added to util_rb_2tld a couple of years ago, when the files
was still mantained by SARE due to recurring abuse,a nd it hasn't ended.. :)

When SARE closed shop, SA dev team agreed it get added to SA core and have a
central point to mantain and allow all users make use it, no only the ones who
picked it up from the SARE repository.
(I've been mantaining this for since the early SARE days.)

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6662] uridnsbl_skip_domain isn't preventing lookups via urirhssub

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6662

Benny Pedersen <me...@junc.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |me@junc.org

--- Comment #1 from Benny Pedersen <me...@junc.org> 2011-09-19 23:36:45 UTC ---
i see timeout aswell, so might not just be me that have problems with dns on
2.0.0.0/8 and surbl, its more generic then just a spamassassin problem, despite
its another problem reported here

could other verify this works:

#cat /etc/resolv.conf
# google public dns server
nameserver 8.8.8.8

gives still timeout ?

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6662] uridnsbl_skip_domain isn't preventing lookups via urirhssub

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6662

--- Comment #6 from Benny Pedersen <me...@junc.org> 2011-09-24 06:02:46 UTC ---
(In reply to comment #2)
> ever though about the fact that google's DNS may be ACL'd by SURBL?

i have not seen this here atleast

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 6662] uridnsbl_skip_domain isn't preventing lookups via urirhssub

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6662

Kris Deugau <kd...@vianet.ca> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kdeugau@vianet.ca

--- Comment #8 from Kris Deugau <kd...@vianet.ca> 2011-09-26 17:42:46 UTC ---
(In reply to comment #7)
> (In reply to comment #5)
> > So what is the verdict on this? Close as INVALID, or change the
> > subject and discuss presence of livejournal.com in util_rb_2tld ?
> 
> close as invalid if none can show a spam content on livejournal.com

I have 49 *.livejournal.com URIs listed in my local URI blacklist, just from
customer missed-spam reports this year alone.  Looking back at the dates these
were added, there was a wave in February/March, and a handful this month.  If
livejournal.com gets removed from util_rb_2tld, I'll be adding it back locally.

I suggest adding news.livejournal.com, www.livejournal.com to
uridnsbl_skip_domain, along with any other fully-owned-by-LJ URIs they use in
their mail.

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.