bugzilla-daemon at bugzilla
Feb 23, 2012, 6:10 AM
Post #4 of 6
(174 views)
Permalink
|
|
[Bug 6764] When used with fetchmail, SA can inappropriately test
[In reply to]
|
|
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6764
--- Comment #4 from Mark Porthouse <mark [at] markporthouse> 2012-02-23 14:10:50 UTC ---
Not merely "when someone submits an email through the service provider from
which you pull mail with fetchmail", more specifically:
when someone submits an email *to* the *actual mail server* (via auth smtp from
their desktop client connecting to that very mail server) from which you pull
mail with fetchmail.
Now, Spamassassin must not 'trust' that submission of email to the mail server
- that would open the door to spam generated by a trojan on desktop PC using
valid authenticating credentials, but it *must not* do route type tests on that
submission - because, of course, they will score badly because nobody wants to
trust just any old PC on the internet.
As I don't think that this an issue about "internal/trusted/msa network
setting" (I'm not willing to trust any old authenticating desktop client) I
won't submit those settings for now.
However, here is a sample header on a received message received with this
problem (where you can see that SA is scoring the dynamic IP of the sending
client!):
Return-Path: <bob [at] domain>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
finaldestination.personaldomain.tld
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.6 required=5.0 tests=BAYES_00,DOS_OUTLOOK_TO_MX,
FSL_HELO_NON_FQDN_1,HELO_NO_DOMAIN,KHOP_DYNAMIC,RCVD_IN_PBL,RCVD_IN_RP_RNBL,
RDNS_DYNAMIC autolearn=no version=3.3.1
X-Spam-Report:
* 0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1
* 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
* [1.1.1.1 listed in zen.spamhaus.org]
* 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
* https://senderscore.org/blacklistlookup/
* [1.1.1.1 listed in bl.score.senderscore.com]
* -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
* [score: 0.0000]
* 1.0 RDNS_DYNAMIC Delivered to internal network by host with
* dynamic-looking rDNS
* 0.0 KHOP_DYNAMIC Relay looks like a dynamic address
* 0.0 HELO_NO_DOMAIN Relay reports its domain incorrectly
* 2.8 DOS_OUTLOOK_TO_MX Delivered direct to MX with Outlook headers
X-Original-To: alice [at] localhos
Delivered-To: alice [at] localhost
Received: from finaldestination.personaldomain.tld (localhost.localdomain
[127.0.0.1])
by finaldestination.personaldomain.tld (Postfix) with ESMTP id 92BFB121525
for <alice [at] localhos>; Tue, 21 Feb 2012 12:00:05 +0000 (GMT)
Received: from mail.domain.tld [2.2.2.2]
by finaldestination.personaldomain.tld with POP3 (fetchmail-6.3.17)
for <alice [at] localhos> (single-drop); Tue, 21 Feb 2012 12:00:05 +0000 (GMT)
Received: from LaptopPC (dynamicip.someisp.tld [1.1.1.1]) by mail.domain.tld
with SMTP;
Tue, 21 Feb 2012 11:07:00 +0000
From: "Bob" <bob [at] domain>
To: "'Alice'" <alice [at] domain>
References: <004901ccf083$e77d91d0$b678b570$@domain.tld>
<4F437473.9080400 [at] personaldomain> <4F437518.4060309 [at] domain>
<005e01ccf087$d62dd1c0$82897540$@domain.tld> <4F437A1F.6040508 [at] domain>
In-Reply-To: <4F437A1F.6040508 [at] domain>
Subject: [SPAM] An email that falls victim to SA
Date: Tue, 21 Feb 2012 11:06:57 -0000
Message-ID: <006201ccf088$ee2851a0$ca78f4e0$@domain.tld>
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQGdnF/FHhGEqV4Yrs225zGBTpWLTwLTwKJuAZnSI0UBXVVPSAHyqMEQlmfsjGA=
Content-Language: en-gb
X-SmarterMail-TotalSpamWeight: 0 (Authenticated)
X-Spam-Prev-Subject: An email that falls victim to SA
Notes about the above headers:
1.1.1.1 (dynamicip.someisp.tld) is the dynamically assigned IP address of the
sending client sending as bob [at] domain
2.2.2.2 is the IP address of the mail.domain.tld server
alice [at] localhos (personaldomain.tld) is the final recipient on the server
finaldestination.personaldomain.tld
alice [at] domain is the address that the email is sent to and a mailbox on the
domain.tld server (where fetchmail picks up from and delivers to Alice's
mailbox on finaldestination.personaldomain.tld
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
|
