You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2015/11/16 15:56:52 UTC

[Bug 7266] New: no IPv6 address on sa-update.secnap.net

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7266

            Bug ID: 7266
           Summary: no IPv6 address on sa-update.secnap.net
           Product: Spamassassin
           Version: 3.4.1
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sa-update
          Assignee: dev@spamassassin.apache.org
          Reporter: curtis@ipv6.occnc.com

The way spamassasin is installed it runs sa-update at install time.  The server
it goes for is sa-update.secnap.net and that server has no ipv6 address.  If
spamassassin is installed on an IPv6 *only* machine, then sa-update fails with
"fetch: http://sa-update.secnap.net/1714413.tar.gz: Network is unreachable".

This can be fixed in one of two way.

One would be for sa-update.secnap.net to get an IPv6 address (a tunnel for
example, if native IPv6 is not available).

Another would be to change sa-update such that an alternate source is used
and/or expose both the selection of host and the files that need to be
downloaded so that a local dual stack mirror can be set up and redirected to.

The former "fix" is easier if there is any control over admin of that host/net.

You might ask "Why would anyone want an IPv6 only mail host?"  The simple
answer is MDA and MUA don't need IPv4 connectivity and real IPv4 addresses (not
rfc1918, aka private, aka NAT addresses) are becoming more scarce.  The MDA can
be fed incoming mail by a dual stack MTA.  The MDA and MUA can use "smarthost"
relaying to relay everything to a dual stack MSA (which can do DKIM signing,
etc, as well).

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7266] no IPv6 address on sa-update.secnap.net

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7266

--- Comment #6 from Mark Martinec <Ma...@ijs.si> ---
@af -> @my_af
  3.4:   Committed revision 1716140.
  trunk: Committed revision 1716139.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7266] no IPv6 address on sa-update.secnap.net

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7266

Joe Quinn <jq...@pccc.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED
                 CC|                            |jquinn+SAbug@pccc.com

--- Comment #4 from Joe Quinn <jq...@pccc.com> ---
Agreed, shouldn't require a CLA for a simple "pick from one of two alternatives
that works" patch. And I appreciate the inclusion of what was checked in the
warning message, plus the edge case of neither v4 or v6 (not sure if that's
possible but points for completeness). Good inclusion for 3.4.2 too.

Committed revision 1715936.
Committed revision 1715937.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7266] no IPv6 address on sa-update.secnap.net

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7266

Kevin A. McGrail <km...@pccc.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kmcgrail@pccc.com

--- Comment #1 from Kevin A. McGrail <km...@pccc.com> ---
note: sa-update.pccc.com is available on both ipv4 and ipv6.  

Not sure if that helps but the resources are donated so it might be a need for
an sa-update change to ideally identify the local stack limitations (or a
switch) so it looks at mirrors that meet the ipv4/6 needs.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7266] no IPv6 address on sa-update.secnap.net

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7266

--- Comment #2 from Curtis Villamizar <cu...@ipv6.occnc.com> ---
Created attachment 5354
  --> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5354&action=edit
patch to sa-update.raw

This is a simple patch.  It has two small block, both add code so diffs are an
easy read.

The first block runs check_mirror_af($mirror) and if it fails forms a dbg
message and does "next" to try a different mirror.

The second block adds the function check_mirror_af.  It uses the existing
$have_inet4 and $have_inet6 variables and the results of do_dns_query with RR
type A and AAAA.

This is efficient since it only checks the mirror picked, not all mirrors.  It
does at most one DNS query for each mirror rejected and one for the mirror
accepted.  If the host is dual stack (both v4 and v6) then at most two DNS
queries are done.  With only four mirrors the efficiency gain of doing the
check late is small.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7266] no IPv6 address on sa-update.secnap.net

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7266

--- Comment #7 from Mark Martinec <Ma...@ijs.si> ---
RFC 3986 section 3.1:
scheme name is case insensitive, digits 1-8 are fine too
  3.4:   Committed revision 1716143.
  trunk: Committed revision 1716145.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7266] no IPv6 address on sa-update.secnap.net

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7266

--- Comment #3 from Kevin A. McGrail <km...@pccc.com> ---
The first run relies on  http://spamassassin.apache.org/updates/MIRRORED.BY
being accessible which does have AAAA and A records.

So this seems like a good patch and trivial enough not to require a CLA.  Other
thoughts from other PMC?

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7266] no IPv6 address on sa-update.secnap.net

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7266

Mark Martinec <Ma...@ijs.si> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|Undefined                   |3.4.2

--- Comment #5 from Mark Martinec <Ma...@ijs.si> ---
missing semicolon, tabs->space, aesthetics

spamassassin-3.4
  Sending: sa-update.raw
Committed revision 1716132.

trunk:
  Sendingsa-update.raw
Committed revision 1716133.

-- 
You are receiving this mail because:
You are the assignee for the bug.