https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6492
Summary: RBL rules should use a postfix of '.' to avoid
appending search domains
Product: Spamassassin
Version: 3.3.0
Platform: PC
OS/Version: Windows 7
Status: NEW
Severity: normal
Priority: P2
Component: Rules
AssignedTo: [email protected]
ReportedBy: [email protected]
As noted in Bug 5984, comments 6 and beyond, I believe we should check the RBL
rules to ensure they end in a '.'
i.e. change header RCVD_IN_BRBL_LASTEXT
eval:check_rbl('brbl-lastexternal','bb.barracudacentral.org') to header
RCVD_IN_BRBL_LASTEXT
eval:check_rbl('brbl-lastexternal','bb.barracudacentral.org.')
Does this require a patch? I see only two entries in 72_active.cf but I made
this a separate ticket because I wonder if the code should warn if we receive
something that includes a . but isn't terminated with a period.
Relevant comments from Bug 5894 below:
[email protected]:
re: Barracuda BRBL
Technical correction (from the docs): "The 'zone' argument - This is the root
zone of the DNSBL, ending in a period."
The TWO references to this blacklist via check_rbl do not terminate the zone
name with a period.
Either the documentation is wrong or we need to fix the rule definition by
adding the trailing period. (file: updates_spamassassin_org/72_active.cf )
Alternative channel file khop-bl_sa_khopesh_com/khop-bl.cf makes the same
mistake.
Mark Martinec:
I believe the dot is optional as far as the DNS resolving is concerned.
I'm not sure if there is some corner piece of code still relying on the dot.
If there is, it should be fixed IMO and the docs changed, making the
dot officially optional.
Tom Schulz:
The resolver code is often configured to try to add various suffixes to
the host name if it does not resolve in an attempt to make it resolve.
A trailing period tells the resolver not to do this. If the name as given
does not resolve, then the resolver just quits.
Kevin A. McGrail:
While the dot is optional, we should add it. I've long since removed search
domains out of my resolve.conf just for this issue.
--
Configure bugmail:
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
