https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7335

--- Comment #8 from Reindl Harald <[email protected]> ---
Created attachment 5399
  --> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5399&action=edit
debug-outputs, testscript and sample-message

at the bottom you see that the first "spamassassin -D dns" pass is missing
URIBL_BLACK while the second one has it as expected

127.0.0.1:53 is a unbound doing direct recursion and the only resolver, it
answers proveable after a restart, see comment above with 0.8 response time
after restart

i think it's pretty clear now that with a cold cache it's very likely to have
at least the first time a new domain appears in a mail URIBL does not hit
proper 

as said i observe similar problems with SPF_PASS and that is a problem with
whitelisting / shortcircuit based on SPF

meta          CUST_SHORTCIRCUIT  (USER_IN_WHITELIST || USER_IN_BLACKLIST ||
USER_IN_BLACKLIST_TO || USER_IN_ALL_SPAM_TO || USER_IN_DKIM_WHITELIST ||
USER_IN_SPF_WHITELIST || ALL_TRUSTED)
priority      CUST_SHORTCIRCUIT  -500
shortcircuit  CUST_SHORTCIRCUIT  on
score         CUST_SHORTCIRCUIT  0.0001
describe      CUST_SHORTCIRCUIT  Skip tests based on whitelists/blacklists and
local relay
_______________________________________________________________________________

[root@mail-gw:/scripts/spamfilter/development]$ cat test.sh
#!/bin/bash
systemctl restart unbound
rm -f /scripts/spamfilter/development/debug/*
for NUMBER in "01" "02" "03" "04" "05" "06" "07" "08" "09" "10" "11" "12" "13"
"14" "15" "16" "17" "18" "19" "20"
do
 su -c "/usr/bin/spamassassin -D <
/scripts/spamfilter/development/uribl-sample.eml" - sa-milt &>
/scripts/spamfilter/development/debug/$NUMBER.txt
done
sleep 60
systemctl restart unbound
rm -f /scripts/spamfilter/development/debug-dns/*
for NUMBER in "01" "02" "03" "04" "05" "06" "07" "08" "09" "10" "11" "12" "13"
"14" "15" "16" "17" "18" "19" "20"
do
 su -c "/usr/bin/spamassassin -D dns <
/scripts/spamfilter/development/uribl-sample.eml" - sa-milt &>
/scripts/spamfilter/development/debug-dns/$NUMBER.txt
done
_______________________________________________________________________________

[root@mail-gw:/scripts/spamfilter/development/debug-dns]$ cat 01.txt | grep -i
black
Jul  6 13:40:58.054 [5522] dbg: dns: URIBL_BLACK lookup start
Jul  6 13:40:58.058 [5522] dbg: dns: URIBL_BLACK lookup start
        *  3.0 URIBL_LOCAL Contains an URL listed in the URIBL blacklist
        *  0.0 CUST_SHORTCIRCUIT Skip tests based on whitelists/blacklists and
_______________________________________________________________________________

[root@mail-gw:/scripts/spamfilter/development/debug-dns]$ cat 02.txt | grep -i
black
Jul  6 13:40:58.964 [5548] dbg: dns: URIBL_BLACK lookup start
Jul  6 13:40:58.967 [5548] dbg: dns: URIBL_BLACK lookup start
Jul  6 13:40:58.982 [5548] dbg: dns: URIBL_BLACK lookup finished
        *  6.5 URIBL_BLACK Contains an URL listed in the URIBL blacklist
        *  3.0 URIBL_LOCAL Contains an URL listed in the URIBL blacklist
        *  0.0 CUST_SHORTCIRCUIT Skip tests based on whitelists/blacklists and

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to