Mailing List Archive: SpamAssassin: devel

[Bug 5856] X-Spam-Relays-Untrusted vs External

Index | Next | Previous | View Threaded

bugzilla-daemon at bugzilla

May 25, 2008, 2:03 PM

Post #1 of 4 (167 views)
Permalink

[Bug 5856] X-Spam-Relays-Untrusted vs External

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5856

--- Comment #15 from Daryl C. W. O'Shea <spamassassin[at]dostech.ca> 2008-05-25 14:03:01 PST ---
(In reply to comment #14)
> Daryl, what do you think?
>
> (In reply to comment #12)
> > Fixed a few issues with DNSEval.pm, any comments for the first one especially?
> >
> > - Trusted relays should not be checked in (non-nice?) RBLs. When -lastexternal
> > was a trusted host, it was still checked.
>
> makes sense to me.

I'd like to see an example (headers & tests run) of the current behaviour and
an explanation of why it should be changed. It's not clear to me why you
wouldn't just change the rule to be -firsttrusted... probably because I'm not
sure which rules are causing the apparent problem.

(It's also not clear to me why I called it -lastexternal and not
-firstexternal, but that's something else entirely).

--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

bugzilla-daemon at bugzilla

May 26, 2008, 12:25 AM

Post #2 of 4 (153 views)
Permalink

[Bug 5856] X-Spam-Relays-Untrusted vs External [In reply to]

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5856

--- Comment #16 from Henrik Krohns <hege[at]hege.li> 2008-05-26 00:25:07 PST ---
(In reply to comment #15)
>
> I'd like to see an example (headers & tests run) of the current behaviour and
> an explanation of why it should be changed. It's not clear to me why you
> wouldn't just change the rule to be -firsttrusted... probably because I'm not
> sure which rules are causing the apparent problem.

host1 -> host2 -> host3

internal_networks host1
trusted_networks host1 host2

Say in this case host2 is a big isp server that I trust and don't want to query
RBLs. Host3 is a dynamic user that I don't want to match on HELO checks etc,
hence all the discussion and change to lastexternal. This is all fine.

All 'rbl-lastexternal' rules refer to host2. But they don't care that out2 is
trusted and DNS queries are done. This is the thing I fixed now.

--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

bugzilla-daemon at bugzilla

May 26, 2008, 9:04 AM

Post #3 of 4 (144 views)
Permalink

[Bug 5856] X-Spam-Relays-Untrusted vs External [In reply to]

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5856

--- Comment #17 from Henrik Krohns <hege[at]hege.li> 2008-05-26 09:04:33 PST ---

I just had an idea that also all these changes would allow.

It is simple to convert all dnswl.org data to trusted_networks entries. There
would be quite a large number of unneeded queries dropped, imagine it on a
global level.

I don't know how fast the cidr code in SA currently is, but I guess it should
handle 30k entries. I'll be testing for sure..

--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

bugzilla-daemon at bugzilla

May 26, 2008, 9:26 AM

Post #4 of 4 (145 views)
Permalink

[Bug 5856] X-Spam-Relays-Untrusted vs External [In reply to]

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5856

--- Comment #18 from Henrik Krohns <hege[at]hege.li> 2008-05-26 09:26:39 PST ---
Ok it seems the cidr chokes on it. But I guess I'll test around and open a new
feature request after these are applied.

--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com