Re: uridnsbl_skip_domain question

Matus UHLAR - fantomas <[email protected]>
Newsgroups gmane.mail.spam.spamassassin.general
Message-ID <[email protected]>
Hello,

I was hoping to fix this finally...

>On 5/17/24 3:17 PM, Matus UHLAR - fantomas wrote:
>>I have configured exclusion for some common domains e.g. gov.sk in SA:
>>
>>uridnsbl_skip_domain [...] gov.sk slovensko.sk
>>
>>However it seems that that domain is still queried:
>>
>>  9826  68.951573    127.0.0.1 → 127.0.0.1    DNS 104 Standard query 0xbffe A mail.gov.sk.multi.uribl.com OPT
>>
>>in SA 4 docs I see that:
>>
>>        uridnsbl_skip_domain domain1 domain2 ...
>>            Specify a domain, or a number of domains, which should be skipped
>>            for the URIBL checks.  This is very useful to specify very common
>>            domains which are not going to be listed in URIBLs.
>>
>>            In addition to trimmed domain, the full hostname is also checked
>>            from the list.
>>
>>Do I have to exclude subdomains for each host too?
>>(this would kind of defeat the directive imho).
>>
>>This is SA 3.4.6 (debian 11) which does not have the latter paragraph but I assume the difference is only in documentation

On 18.05.24 19:30, [email protected] wrote:
>From a quick look at the code it seems that subdomains check has been added to Mail::SpamAssassin::Plugin::URIDNSBL with commit r1889093 ~10 days after 3.4.6 release.
>In addition to that Mail::SpamAssassin::Plugin::DNSEval honor uridnsbl_skip_domain preference only in trunk code.

I have retried this with SA 4.0.0 (debian 12), and unfortunately this still 
happens:

18:05:31.348747 IP 192.168.251.228.45721 > 54.233.104.8.53: 26118 [1au] A? g2inmail1.gov.sk.multi.uribl.com. (73)
18:15:39.860161 IP 192.168.251.228.55448 > 54.152.34.162.53: 29958 [1au] A? g2inmail3.gov.sk.multi.uribl.com. (73)

and SA debug output shows:

Jul 24 18:20:28.580 [8512] dbg: check: tagrun - tag URIHOSTS is now ready, value: ARY:[g2inmail1.gov.sk,mail.gov.sk,msx1.upvsp.gov.sk]
Jul 24 18:41:13.899 [9295] dbg: check: tagrun - tag URIDOMAINS is now ready, value: ARY:[g2inmail1.gov.sk,mail.gov.sk,upvsp.gov.sk]

I see that gov.sk is listed in:

20_aux_tlds.cf:util_rb_2tld edu.sk gov.sk mil.sk

Can this listing be the reason why its subdomains are still queried?

-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Micro$oft random number generator: 0, 0, 0, 4.33e+67, 0, 0, 0...
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.