https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6484

           Summary: Mail::SpamAssassin::Plugin::ASN - Alternative zone
                    FORMAT enhancements.
           Product: Spamassassin
           Version: 3.3.1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Plugins
        AssignedTo: [email protected]
        ReportedBy: [email protected]


Created an attachment (id=4800)
 --> (https://issues.apache.org/SpamAssassin/attachment.cgi?id=4800)
UNTESTED replacement for file ASN.pm (not a diff-style patch)

1) It appears that the TXT-RR returned by at least one alternative zone
offering has only one field, the ASN.  Since it lacks 3 fields, extracting the
data in process_dns_result() of the module FAILS.

2) I have also noted at least two other zones offering the same or similar
data, some with additional fields, and formatted differently.  I've rewritten
the process_dns_result() routine in the ASN.pm file to accomodate these
additional formats.

Zones being tested:
   asn.routeviews.org
   origin.asn.cymru.com
   origin.asn.spameatingmonkey.net
   ip2asn.sasm4.net

3)  I note that this plugin handles IPv4 lookups only.  I shall leave IPv6
handling for someone more skilled in SA and perl.  Meanwhile, I do note that
there is one IPv6 lookup zone that follows the "ip6.arpa" format for reversing
an IPv6 address:

   origin6.asn.cymru.com

The IPv6 modification which is needed appears to be ONLY in parsed_metadata()
after the "local()" where I have commented.

I am alpha-testing a replacement file now.  It passes the "SA --lint" test. 
However, I don't think it's working.  However, it did fetch these DNS TXT-RR's
for my test message:

123.237.142.68.ip2asn.sasm4.net. 3501 TXT "as14779"
123.237.142.68.asn.routeviews.org. 86300 TXT "14779" "68.142.224.0" "20"
123.237.142.68.origin.asn.cymru.com. 14300 TXT "14779 | 68.142.224.0/20 | US |
arin | 2004-03-24"
123.237.142.68.origin.asn.spameatingmonkey.net. 200 TXT "68.142.224.0/20 |
AS14779 | Inktomi Corporation | 2000-02-07 | Unknown"

(Test source address 68.142.237.123 is a Yahoo.com mail server.  All four
records were in my DNS server's cache, so I know the lookup part still works.)

Does anyone else want to take a stab at upgrading this module (and share
credit)?

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to