Mailing List Archive

http://bugzilla.spamassassin.org/show_bug.cgi?id=3183





------- Additional Comments From jhein@timing.com 2004-03-16 09:44 -------
Created an attachment (id=1851)
--> (http://bugzilla.spamassassin.org/attachment.cgi?id=1851&action=view)
received header that fools SA's dnsbl tests

Here is the attachment for the case of a Received header WITH a trailing space
that seems to confuse SA (s5)



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.spamassassin.org/show_bug.cgi?id=3183





------- Additional Comments From jhein@timing.com 2004-03-17 09:52 -------
Created an attachment (id=1855)
--> (http://bugzilla.spamassassin.org/attachment.cgi?id=1855&action=view)
another with a space that fools RCVD_IN_DYNABLOCK

Here is another FP I got with a Received header WITH a trailing space
that makes RCVD_IN_DYNABLOCK think it was sent directly from a dynamic IP.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.spamassassin.org/show_bug.cgi?id=3183





------- Additional Comments From jhein@timing.com 2004-03-17 12:42 -------
This is the culprit (in lib/Mail/SpamAssassin/Received.pm)

65: my @rcvd = ($hdrs =~ /^(\S.+\S)$/gm);

This makes SA ignore the Received: headers that have whitespace at the end.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.spamassassin.org/show_bug.cgi?id=3183





------- Additional Comments From jhein@timing.com 2004-03-17 14:35 -------
Created an attachment (id=1856)
--> (http://bugzilla.spamassassin.org/attachment.cgi?id=1856&action=view)
[patch] strip trailing whitespace on Received headers

This patch fixes the problem parsing Received headers with trailing whitespace
in SA 2.63.

I have not tested later versions of SA to see if they are vulnerable to the
trailing whitespace problem.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.spamassassin.org/show_bug.cgi?id=3183

jm@jmason.org changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED



------- Additional Comments From jm@jmason.org 2004-03-17 20:50 -------
ok, fixed -- the code is radically different in 3.0.0, so I didn't use the patch.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.