Skip to content

Use correct "127.0.1.102-127.0.1.106" range format for SH_DBL_ABUSED_… - #71

Open
robertmathews wants to merge 1 commit into
spamhaus:masterfrom
robertmathews:SH_DBL_ABUSED_FULLHOST-syntax
Open

Use correct "127.0.1.102-127.0.1.106" range format for SH_DBL_ABUSED_…#71
robertmathews wants to merge 1 commit into
spamhaus:masterfrom
robertmathews:SH_DBL_ABUSED_FULLHOST-syntax

Conversation

@robertmathews

Copy link
Copy Markdown

…FULLHOST rather than "127.0.1.102-106"

The previous format of "127.0.1.102-106" does not work in SpamAssassin 4.0+, and causes false negatives like this (note the incorrect "7f000166-0000006a", suggesting "127.0.1.102-106" is expanded to "127.0.1.102-0.0.0.106"):

dbg: uridnsbl: geno.link . geno.link.your_DQS_key.dbl.dq.spamhaus.net -> 127.0.1.102, SH_DBL_ABUSED_FULLHOST, subtest:2130706790-106
dbg: uridnsbl: geno.link . geno.link.your_DQS_key.dbl.dq.spamhaus.net -> 127.0.1.102, SH_DBL_ABUSED_FULLHOST, 7f000166 7f000166-0000006a no

After this fix, it correctly matches:

dbg: uridnsbl: geno.link . geno.link.your_DQS_key.dbl.dq.spamhaus.net -> 127.0.1.102, SH_DBL_ABUSED_FULLHOST, subtest:2130706790-2130706794
dbg: uridnsbl: geno.link . geno.link.your_DQS_key.dbl.dq.spamhaus.net -> 127.0.1.102, SH_DBL_ABUSED_FULLHOST, 7f000166 7f000166-7f00016a match

…FULLHOST rather than ""127.0.1.102-106"

The previous format of "127.0.1.102-106" does not work in SpamAssassin 4.0+, and causes false negatives like this (note the incorrect "7f000166-0000006a", suggesting "127.0.1.102-106" is expanded to "127.0.1.102-0.0.0.106"):

```
dbg: uridnsbl: geno.link . geno.link.your_DQS_key.dbl.dq.spamhaus.net -> 127.0.1.102, SH_DBL_ABUSED_FULLHOST, subtest:2130706790-106
dbg: uridnsbl: geno.link . geno.link.your_DQS_key.dbl.dq.spamhaus.net -> 127.0.1.102, SH_DBL_ABUSED_FULLHOST, 7f000166 7f000166-0000006a no
```

After this fix, it correctly matches:

```
dbg: uridnsbl: geno.link . geno.link.your_DQS_key.dbl.dq.spamhaus.net -> 127.0.1.102, SH_DBL_ABUSED_FULLHOST, subtest:2130706790-2130706794
dbg: uridnsbl: geno.link . geno.link.your_DQS_key.dbl.dq.spamhaus.net -> 127.0.1.102, SH_DBL_ABUSED_FULLHOST, 7f000166 7f000166-7f00016a match
```
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant