Re: SA trusts all hosts as soon as IPv6 is enabled? (was Re: AWL problem. Assigning very low scores to spam.)

2008-02-27 Thread Stefan `Sec` Zehl
On Tue, Feb 26, 2008 at 19:13 -0500, Daryl C. W. O'Shea wrote: [...] > If you or your company would like to fund the development of it, I'm > willing to prioritize the work. Seriously. Otherwise, "should have by > now" does not apply to free software. Especially free software that is > easily mo

Re: SA trusts all hosts as soon as IPv6 is enabled? (was Re: AWL problem. Assigning very low scores to spam.)

2008-02-26 Thread Daryl C. W. O'Shea
On 26/02/2008 11:07 AM, Stefan `Sec` Zehl wrote: > Hi, > > On Tue, Feb 26, 2008 at 15:56 +, Justin Mason wrote: >> The fix would be to implement support for IPv6 trust paths: >> >> http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4503 >> http://issues.apache.org/SpamAssassin/show_bug.cgi?

Re: SA trusts all hosts as soon as IPv6 is enabled? (was Re: AWL problem. Assigning very low scores to spam.)

2008-02-26 Thread Loren Wilton
Ok, here is a patch which fixes this specific (IPv6) problem until someone has time to make SA completely v6 aware: --- Mail/SpamAssassin/Message/Metadata/Received.pm.orig 2008-02-26 17:28:28.0 +0100 +++ Mail/SpamAssassin/Message/Metadata/Received.pm 2008-02-26 17:28:52.0 +0100

Re: SA trusts all hosts as soon as IPv6 is enabled? (was Re: AWL problem. Assigning very low scores to spam.)

2008-02-26 Thread Stefan `Sec` Zehl
Hi, On Tue, Feb 26, 2008 at 16:26 +, Justin Mason wrote: > Stefan `Sec` Zehl writes: > > Ok, so you're telling me that not only is this bug known, but it went > > unfixed fot over a year? > > Unfortunately, nobody who's bothered by it, has bothered fixing it > and sending us a patch. I'll om

Re: SA trusts all hosts as soon as IPv6 is enabled? (was Re: AWL problem. Assigning very low scores to spam.)

2008-02-26 Thread Justin Mason
Stefan `Sec` Zehl writes: > Hi, > > On Tue, Feb 26, 2008 at 15:56 +, Justin Mason wrote: > > The fix would be to implement support for IPv6 trust paths: > > > > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4503 > > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4964 > > Ok,

Re: SA trusts all hosts as soon as IPv6 is enabled? (was Re: AWL problem. Assigning very low scores to spam.)

2008-02-26 Thread Stefan `Sec` Zehl
Hi, On Tue, Feb 26, 2008 at 15:56 +, Justin Mason wrote: > The fix would be to implement support for IPv6 trust paths: > > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4503 > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4964 Ok, so you're telling me that not only is this bu

Re: SA trusts all hosts as soon as IPv6 is enabled? (was Re: AWL problem. Assigning very low scores to spam.)

2008-02-26 Thread Justin Mason
Stefan `Sec` Zehl writes: > Hi, > > Ok, I debugged this a bit more. > > Problem is, these headers were marked as ALL_TRUSTED: > > > > | Received: from mout4.freenet.de (mout4.freenet.de > > > [IPv6:2001:748:100:40::2:6]) > > > | (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits

Re: SA trusts all hosts as soon as IPv6 is enabled? (was Re: AWL problem. Assigning very low scores to spam.)

2008-02-26 Thread Stefan `Sec` Zehl
Hi, Ok, I debugged this a bit more. Problem is, these headers were marked as ALL_TRUSTED: > > | Received: from mout4.freenet.de (mout4.freenet.de > > [IPv6:2001:748:100:40::2:6]) > > | (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) > > | (No client certificate reque

SA trusts all hosts as soon as IPv6 is enabled? (was Re: AWL problem. Assigning very low scores to spam.)

2008-02-26 Thread Stefan `Sec` Zehl
Hi, On Tue, Feb 26, 2008 at 14:56 +0100, Stefan `Sec` Zehl wrote: > [... on producing ALL_TRUSTED with these header ...] > > | Received: from mout4.freenet.de (mout4.freenet.de > [IPv6:2001:748:100:40::2:6]) > | (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) > | (No

Re: AWL problem. Assigning very low scores to spam.

2008-02-26 Thread Stefan `Sec` Zehl
Hi, On Tue, Feb 26, 2008 at 08:38 -0500, Matt Kettler wrote: > Stefan `Sec` Zehl wrote: > >The AWL is acting seriously wrong. I get some spam with my own address > >in the "From:" header, and the AWL assigns ridiculous scores to it. > Any chance you have a broken trust path? (ie: does ALL_TRUSTED

Re: AWL problem. Assigning very low scores to spam.

2008-02-26 Thread Matt Kettler
Stefan `Sec` Zehl wrote: Hi, I'm having trouble with the AWL of Spamassassin. The AWL is acting seriously wrong. I get some spam with my own address in the "From:" header, and the AWL assigns ridiculous scores to it. Any chance you have a broken trust path? (ie: does ALL_TRUSTED ever fire o

AWL problem. Assigning very low scores to spam.

2008-02-26 Thread Stefan `Sec` Zehl
Hi, I'm having trouble with the AWL of Spamassassin. The AWL is acting seriously wrong. I get some spam with my own address in the "From:" header, and the AWL assigns ridiculous scores to it. I have quite a few cronjobs running which send mail with the same "From"-address on my local machine but