RFC: SpamAssassin subject munging considered harmful :)

Todd Zullinger tmz at pobox.com
Tue Feb 2 14:32:04 UTC 2010


I noticed that a number of messages to the users list have been marked
with [Spam] in the subjects since the list migration.  This appears to
be due to the Spamassassin settings on bastion.  I think this subject
munging is undesirable and would like to see it stopped.  Having
legitimate messages sent to list members tagged as [SPAM] serves no
good purpose.  If I were a list member I might wonder why my message
was marked or why Fedora is forwarding on mail it thinks is spam.

At the same time, it's worth noting that if the SpamAssassin settings
are marking legitimate list mail as spam, they probably ought to be
tweaked a bit.  If these messages had gone through bastion before
hitting Mailman and were to a list with a rule to reject or discard on
X-Spam-Flag (as I know several lists do, websites being one example),
the messages would have been improperly discarded.

This isn't to say I don't appreciate the job that SpamAssassin does
nor the hard work put in by Warren and others upstream.  I just want
to ensure that SpamAssassin does not act too aggressively at marking
up the mail that comes through fedoraproject.org.

I've attached an example of a recent users list message which was
marked as spam improperly.  The relevant SpamAssassin headers:

X-Spam-Checker-Version: SpamAssassin 3.3.0 (2010-01-18) on
 bastion2.fedora.phx.redhat.com
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.6 required=5.0 tests=BAYES_50,SPOOF_COM2COM,
 SPOOF_COM2OTH autolearn=no version=3.3.0
X-Spam-Report: *  2.7 SPOOF_COM2OTH URI: URI contains ".com" in middle *  2.0
 SPOOF_COM2COM URI: URI contains ".com" in middle and end *  0.8 BAYES_50
 BODY: Bayes spam probability is 40 to 60% *      [score: 0.5000]

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Life is like a sewer. What you get out of it depends on what  you put
into it.
    -- Tom Lehrer, quoting Henry

-------------- next part --------------
Return-Path: <store at b-pb-mailstore-quonix>
Received: from murder ([unix socket])
	 (authenticated user=09356542 at mailstore.pobox.com bits=0)
	 by b-pb-mailstore-quonix (Cyrus v2.2.13) with LMTPA;
	 Tue, 02 Feb 2010 05:59:09 -0500
X-Sieve: CMU Sieve 2.2
Received: from indigo.pobox.com (indigo.pobox.com [64.74.157.52]) by
 mailstore.pobox.com (Postfix) with ESMTP id B3ACF209E7 for
 <09356542 at mailstore.pobox.com>; Tue,  2 Feb 2010 05:59:09 -0500 (EST)
Received: from indigo.pobox.com (localhost [127.0.0.1]) by indigo.pobox.com
 (Postfix) with ESMTP id 7D5072000FE for <09356542 at mailstore.pobox.com>; Tue, 
 2 Feb 2010 05:59:09 -0500 (EST)
Delivered-To: tmz at pobox.com
X-Pobox-Orig-Sender: <users-bounces at lists.fedoraproject.org>
X-Pobox-Delivery-ID:
 FC62A9AE-0FE9-11DF-936B-986EADF4353F-09356542!indigo.pobox.com
X-Original-To: users at lists.fedoraproject.org
x-pobox-client-address: 209.132.182.51
x-pobox-client-name: bastion.fedoraproject.org
Received: from bastion.fedoraproject.org (bastion.fedoraproject.org
 [209.132.182.51]) by indigo.pobox.com (Postfix) with ESMTP id 2F816200245;
 Tue,  2 Feb 2010 05:58:55 -0500 (EST)
Received: by bastion2.fedora.phx.redhat.com (Postfix, from userid 503) id
 D5E8710FA45; Tue,  2 Feb 2010 11:01:10 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.3.0 (2010-01-18) on
 bastion2.fedora.phx.redhat.com
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.6 required=5.0 tests=BAYES_50,SPOOF_COM2COM,
 SPOOF_COM2OTH autolearn=no version=3.3.0
X-Spam-Report: *  2.7 SPOOF_COM2OTH URI: URI contains ".com" in middle *  2.0
 SPOOF_COM2COM URI: URI contains ".com" in middle and end *  0.8 BAYES_50
 BODY: Bayes spam probability is 40 to 60% *      [score: 0.5000]
Received: from lists.fedoraproject.org (unknown [192.168.1.21]) by
 bastion2.fedora.phx.redhat.com (Postfix) with ESMTP id DEC4710FA87; Tue,  2
 Feb 2010 11:00:57 +0000 (UTC)
Received: from collab1.fedoraproject.org (localhost.localdomain [127.0.0.1])
 by lists.fedoraproject.org (Postfix) with ESMTP id E1C31326784; Tue,  2 Feb
 2010 10:57:55 +0000 (UTC)
Delivered-To: users at lists.fedoraproject.org
Received: from smtp-mm2.fedoraproject.org (smtp-mm2.fedoraproject.org
 [66.35.62.164]) by lists.fedoraproject.org (Postfix) with ESMTP id
 83F59326784 for <users at lists.fedoraproject.org>; Tue,  2 Feb 2010 10:57:52
 +0000 (UTC)
Received: from smtpout.karoo.kcom.com (smtpout.karoo.kcom.com
 [212.50.160.34]) by smtp-mm2.fedoraproject.org (Postfix) with ESMTP id
 AC331E73A1 for <users at lists.fedoraproject.org>; Tue,  2 Feb 2010 10:57:51
 +0000 (UTC)
X-IronPort-AV: E=Sophos;i="4.49,389,1262563200"; d="scan'208";a="170893528"
Received: from static-87-102-15-59.karoo.kcom.com (HELO
 duncan-berrimans-computer.local) ([87.102.15.59]) by smtpout.karoo.kcom.com
 with ESMTP; 02 Feb 2010 10:57:50 +0000
Message-ID: <4B68052D.9080703 at dcl.co.uk>
Date: Tue, 02 Feb 2010 10:57:49 +0000
From: Duncan Berriman <duncan at dcl.co.uk>
User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812)
MIME-Version: 1.0
To: users at lists.fedoraproject.org
Subject: [SPAM] bug/feature in host/nslookup command - queries wrong server
X-BeenThere: users at lists.fedoraproject.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: Community support for Fedora users <users at lists.fedoraproject.org>
List-Id: Community support for Fedora users <users.lists.fedoraproject.org>
List-Unsubscribe: <https://admin.fedoraproject.org/mailman/listinfo/users>,
 <mailto:users-request at lists.fedoraproject.org?subject=unsubscribe>
List-Archive: <http://lists.fedoraproject.org/pipermail/users>
List-Post: <mailto:users at lists.fedoraproject.org>
List-Help: <mailto:users-request at lists.fedoraproject.org?subject=help>
List-Subscribe: <https://admin.fedoraproject.org/mailman/listinfo/users>,
 <mailto:users-request at lists.fedoraproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: users-bounces at lists.fedoraproject.org
Errors-To: users-bounces at lists.fedoraproject.org
X-Spam-Prev-Subject: bug/feature in host/nslookup command - queries wrong
 server
X-ICG-Account-ID: 09356542

Hi,

I have noticed that fedora 10 appears to ignore the server option when 
using host  or nslookup if the host in question is not available.

The commands should return no server available as they have in the past 
but instead decide to query the local name server and return results 
from that.

# nslookup google.co.uk 123.123.123.1
Server:         127.0.0.1
Address:        127.0.0.1#53

Non-authoritative answer:
Name:   google.co.uk
Address: 66.102.11.99
Name:   google.co.uk
Address: 66.102.11.104

# host google.co.uk 123.123.123.1
Using domain server:
Name: 127.0.0.1
Address: 127.0.0.1#53
Aliases:

google.co.uk has address 66.102.11.104
google.co.uk has address 66.102.11.99
google.co.uk mail is handled by 10 google.com.s9b1.psmtp.com.
google.co.uk mail is handled by 10 google.com.s9b2.psmtp.com.
google.co.uk mail is handled by 10 google.com.s9a1.psmtp.com.
google.co.uk mail is handled by 10 google.com.s9a2.psmtp.com.

Using the debug option does not reveal anything it appears that the 
command just decides since it can't connect to the server in question it 
will query the servers defined in resolv.conf instead.

Is there an option in later release of fedora to enable/disable this? Is 
it expected behaviour now?

Help!

Duncan
-- 
users mailing list
users at lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 542 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20100202/dd5ae2ae/attachment.bin 


More information about the infrastructure mailing list