https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8505

            Bug ID: 8505
           Summary: URILocalBL: an excluded address stops the rule from
                    checking the message's other URIs
           Product: Spamassassin
           Version: SVN Trunk (Latest Devel Version)
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Plugins
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: Undefined

Created attachment 6207
  --> https://bz.apache.org/SpamAssassin/attachment.cgi?id=6207&action=edit
patch to skip only the excluded host, and correct the uri_block_exclude example

When a URI's host resolves to an address listed in uri_block_exclude,
_check_host returns 1, the value it returns after recording a hit, so its
callers take it to mean the rule has hit. The DNS callback then marks the rule
finished, and the answers for the message's other hosts are ignored. So a URI
that should hit a uri_block_* rule does not hit when a link to a host on an
excluded address is answered first, and a sender who controls the DNS for the
listed host can arrange that.

The attached patch returns 0 there, so an excluded address skips only that
host.

It also corrects the example in the POD. Since bug 7060 ("allow excluding
domains instead of individual hosts") an exclusion is matched against the URI's
registered domain, but the example excludes www.baidu.com, which never matches.
The example now uses baidu.com, and the text mentions excluding an address.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to