Hey Mark,
thanks for your explanation! > I'm beginning to understand what is going on here. > Because you have a older version of Mail::DKIM, spamassassin is > unable to provide it with its own resolver, so Mail::DKIM does > it by directly calling Net::DNS, which uses IO::Socket::INET, > while the rest of the SpamAssassin's DNS resolving goes through > IO::Socket::IP. For some reason a TCP DNS request by Net::DNS > affects the socket used by IO::Socket::IP, making a variable > holding a string also get a numerical component, and moreover > it becomes tainted. In the end the getnameinfo() falls into > the snag. Weird... The only way to fix this issue is to update Mail::DKIM? I’m gonna ask the maintainer to upload an update to wheezy-backports. Thanks! Thomas