https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6565

           Summary: check_rbl_sub rules - all dots need to be escaped
           Product: Spamassassin
           Version: SVN Trunk (Latest Devel Version)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Rules (Eval Tests)
        AssignedTo: [email protected]
        ReportedBy: [email protected]


Everything of the from 
eval:check_rbl_sub('<whatever>', '127.0.0.1') 
should be replaced with 
eval:check_rbl_sub('<whatever>', '^127\.0\.0\.1$')

"." means "any one character" in the perl regexes used to define these, and
these will match any substring in an IP if it doesn't start with "^" and end
with "$".  So...

72_active.cf:header     RCVD_IN_DNSWL_HI       
eval:check_rbl_sub('dnswl-firsttrusted', '127.0.\d+.3')

will match 127.0.0.3, but it will also match 127.0.103.2.  Which doesn't happen
because DNSWL doesn't currently have any three digit numbers in the third
octet.

I'm not seeing any cases where it looks like this is likely to currently be
causing problems.

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to