Bug 8244 - Update rules for Validity DNSBL lookups
Summary: Update rules for Validity DNSBL lookups
Status: NEW
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (show other bugs)
Version: SVN Trunk (Latest Devel Version)
Hardware: PC Windows 11
: P2 normal
Target Milestone: Undefined
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-04-18 21:00 UTC by Eric Hokanson
Modified: 2024-04-18 21:00 UTC (History)
0 users



Attachment Type Modified Status Actions Submitter/CLA Status
patch file for validity dnsbl patch None Eric Hokanson [NoCLA]

Note You need to log in before you can comment on or make changes to this bug.
Description Eric Hokanson 2024-04-18 21:00:22 UTC
Created attachment 5952 [details]
patch file for validity dnsbl

Attached is a patch for your review to update the DNSBL rules recently implemented for Validity IP blocking. After analyzing our DNS logs following the recent changes in bug ID 8233, we don't think they are behaving in a way that was intended. The attached patch is much more effective and efficient rule set.

The rules were tested against a local DNS instance using the spamassassin cli:
perl -T ./spamassassin -t -D < ./t/data/spam/001

blocked output:

 pts rule name              description                                                                                                                                                                                                                                                                                                                                            
---- ---------------------- --------------------------------------------------                                                                                                                                                                                                                                                                                                     
 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to                                                                                                                                                                                                                                                                                                         
                             Validity was blocked.  See                                                                                                                                                                                                                                                                                                                            
                            https://knowledge.validity.com/hc/en-us/articles/20961730681243                                                                                                                                                                                                                                                                                        
                             for more information.                                                                                                                                                                                                                                                                                                                                 
                          [193.120.211.219 listed in bl.score.senderscore.com]                                                                                                                                                                                                                                                                                                     
 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to                                                                                                                                                                                                                                                                                                         
                             Validity was blocked.  See                                                                                                                                                                                                                                                                                                                            
                            https://knowledge.validity.com/hc/en-us/articles/20961730681243                                                                                                                                                                                                                                                                                        
                             for more information.                                                                                                                                                                                                                                                                                                                                 
                            [193.120.211.219 listed in sa-accredit.habeas.com]                                                       
 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The                                                               
                            query to Validity was blocked.  See                                                                      
                            https://knowledge.validity.com/hc/en-us/articles/20961730681243                                          
                             for more information.                                                                                   
                       [193.120.211.219 listed in sa-trusted.bondedsender.org]