http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4751

           Summary: RBL lookups are always skipped under some conditions
           Product: Spamassassin
           Version: 3.1.0
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P5
         Component: spamassassin
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


SA parses Received headers in an attempt to do an RBL lookup on the 'from' host.
 However, within SA, RBL lookups are skipped if the 'by' host resolves to a
private IP (such as 10.<whatever>).  Since any resolution of the 'by' host
inside our network will always net a private IP, RBL lookups are skipped.  

I imagine it to be a very common setup that IPs resolve to private ranges inside
the local network and public ranges only from the outside.  Thus, any SA scans
taking place within such a network will always skip RBL checks.

An example:

Received: from remote-host ([a.b.c.d]) by sub.domain.com ([e.f.g.h])
    // etc..

SpamAssassin ignores [e.f.g.h] and does an lookup on sub.domain.com to get it's
IP.  Inside the network where SpamAssassin is running the ip resolves to
10.0.0.1 (for example).  There is a implicit trust of all private networks and
since trusted ips don't do RBL lookups this is the problem.

-- 
Arvel Hathcock
[EMAIL PROTECTED]



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to