On 4 Nov 2018, at 14:48, Matus UHLAR - fantomas wrote:
On 4 Nov 2018, at 11:45, Grant Taylor wrote:
Why does it matter if there's a naming collision between DNS domain
names and file names?
Bill Cole skrev den 2018-11-04 19:25:
Discussion of config files for SpamAssassin and Postfix has
intermittently been matched by URI DNSBLs. Some years ago I
discovered
just how widespread dumb bounce models were when I talked about the
master config file for Postfix on the Postfix Users list, the same
week that someone was spamvertising URLs under master (dot) cf.
On 04.11.18 19:48, Benny Pedersen wrote:
Nov 3 03:22:50 localhost named[2301]: connection refused resolving
'72_scores.cf/NS/IN': 2a04:1b00:6::1#53
[...]
Oct 31 08:30:38 localhost named[2301]: connection refused resolving
'20_imageinfo.cf/NS/IN': 2a04:1b00:6::1#53
so ns.cf blocks my named now, i cant resolve any cf domains with it
time to change imho
I recommend chasing who is treating those as URLs.
That would be SpamAssassin itself. The policy of treating anything
matching '[-a-zA-Z0-9_]+\.<known TLD>' as an URI in all contexts dates
back to v3.3.1 at least. See
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=6716 and note this
scan of a recent message:
# spamassassin -t -D uridnsbl
/tmp/mdpreserve.42nj0s5F0hz1hSbGh/INPUTMSG 2>&1 |pcregrep
'\.cf\b|^(From|Subject|Date|Message-Id): '
Nov 4 15:55:21.684 [55625] dbg: uridnsbl: considering
host=72_scores.cf, domain=72_scores.cf
Nov 4 15:55:21.720 [55625] dbg: uridnsbl: complete_dnsbl_lookup
X_URIBL_A DNSBL:72_scores.cf:dnsbltest.spamassassin.org
Nov 4 15:55:21.721 [55625] dbg: uridnsbl: complete_dnsbl_lookup
X_URIBL_B DNSBL:72_scores.cf:dnsbltest.spamassassin.org
Nov 4 15:55:21.721 [55625] dbg: uridnsbl: complete_dnsbl_lookup
X_URIBL_DOMSONLY DNSBL:72_scores.cf:dnsbltest.spamassassin.org
Nov 4 15:55:21.722 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_RHS_DOB DNSBL:72_scores.cf:dob.sibl.support-intelligence.net
Nov 4 15:55:22.051 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_MW_SURBL DNSBL:72_scores.cf:multi.surbl.org
Nov 4 15:55:22.051 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_WS_SURBL DNSBL:72_scores.cf:multi.surbl.org
Nov 4 15:55:22.052 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_PH_SURBL DNSBL:72_scores.cf:multi.surbl.org
Nov 4 15:55:22.052 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_CR_SURBL DNSBL:72_scores.cf:multi.surbl.org
Nov 4 15:55:22.052 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_ABUSE_SURBL DNSBL:72_scores.cf:multi.surbl.org
Nov 4 15:55:22.052 [55625] dbg: uridnsbl: complete_dnsbl_lookup
SURBL_BLOCKED DNSBL:72_scores.cf:multi.surbl.org
Nov 4 15:55:22.053 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_MALWARE DNSBL:72_scores.cf:dbl.spamhaus.org
Nov 4 15:55:22.053 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_ABUSE_PHISH DNSBL:72_scores.cf:dbl.spamhaus.org
Nov 4 15:55:22.053 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_BOTNETCC DNSBL:72_scores.cf:dbl.spamhaus.org
Nov 4 15:55:22.053 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_PHISH DNSBL:72_scores.cf:dbl.spamhaus.org
Nov 4 15:55:22.053 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_ABUSE_REDIR DNSBL:72_scores.cf:dbl.spamhaus.org
Nov 4 15:55:22.053 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_ERROR DNSBL:72_scores.cf:dbl.spamhaus.org
Nov 4 15:55:22.053 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_ABUSE_SPAM DNSBL:72_scores.cf:dbl.spamhaus.org
Nov 4 15:55:22.053 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_SPAM DNSBL:72_scores.cf:dbl.spamhaus.org
Nov 4 15:55:22.053 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_ABUSE_BOTCC DNSBL:72_scores.cf:dbl.spamhaus.org
Nov 4 15:55:22.054 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_DBL_ABUSE_MALW DNSBL:72_scores.cf:dbl.spamhaus.org
Nov 4 15:55:22.054 [55625] dbg: uridnsbl: complete_ns_lookup
NS:72_scores.cf
Nov 4 15:55:22.055 [55625] dbg: uridnsbl: complete_a_lookup
A:72_scores.cf
Nov 4 15:55:22.056 [55625] dbg: uridnsbl: complete_dnsbl_lookup
KAM_BODY_COMPROMISED_URIBL_PCCC DNSBL:72_scores.cf:wild.pccc.com
Nov 4 15:55:22.056 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_RED DNSBL:72_scores.cf:multi.uribl.com
Nov 4 15:55:22.056 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_BLOCKED DNSBL:72_scores.cf:multi.uribl.com
Nov 4 15:55:22.057 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_GREY DNSBL:72_scores.cf:multi.uribl.com
Nov 4 15:55:22.057 [55625] dbg: uridnsbl: complete_dnsbl_lookup
URIBL_BLACK DNSBL:72_scores.cf:multi.uribl.com
Subject: svn commit: r1845712 - in /spamassassin/trunk/rulesrc/scores:
72_scores.cf
Date: Sun, 04 Nov 2018 04:06:19 -0000
From: spamassassin_r...@apache.org
Message-Id: <20181104040619.bb2623a0...@svn01-us-west.apache.org>
Date: Sun Nov 4 04:06:18 2018
spamassassin/trunk/rulesrc/scores/72_scores.cf
Modified: spamassassin/trunk/rulesrc/scores/72_scores.cf
URL:
http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/scores/72_scores.cf?rev=1845712&r1=1845711&r2=1845712&view=diff
--- spamassassin/trunk/rulesrc/scores/72_scores.cf (original)
+++ spamassassin/trunk/rulesrc/scores/72_scores.cf Sun Nov 4 04:06:18
2018
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Available For Hire: https://linkedin.com/in/billcole
