securitysage.com blacklist gone, causing artificial bumps in spam score

Bug #289915 reported by Ryan Parrish
6
Affects Status Importance Assigned to Milestone
Dapper Backports
Fix Released
High
Unassigned
spamassassin (Ubuntu)
Invalid
Medium
Unassigned
Dapper
Fix Released
Medium
Scott Kitterman
Gutsy
Fix Released
Medium
Scott Kitterman

Bug Description

Binary package hint: spamassassin

The black list securitysage.com no longer exists and in an effort to make people stop querying their zone are reporting every check as blacklisted. By default this adds 2.001 to the spam score.

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5672

You can remove the offending rules by deleting the following...

lines 228 - 232 in /usr/share/spamassassin/20_dnsbl_tests.cf
line 102 in /usr/share/spamassassin/50_scores.cf

Revision history for this message
Tomasz 'Zen' Napierala (tzn) wrote :

Thank you for your time reporting this problem.
Unfortunately we don't have enough information to troubleshoot this problem. Could you please provide us with spamassassin package version:
apt-cache show spamassassin
and also Ubuntu release you are running.

Changed in spamassassin:
status: New → Incomplete
Revision history for this message
Scott Kitterman (kitterman) wrote :

Urgh. No. This is trivial to fix. We need to check all supported versions anyway.

Changed in spamassassin:
assignee: nobody → kitterman
status: Incomplete → In Progress
Changed in spamassassin:
importance: Undecided → Medium
Changed in spamassassin:
assignee: nobody → kitterman
importance: Undecided → Medium
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package spamassassin - 3.1.0a-2ubuntu1.2

---------------
spamassassin (3.1.0a-2ubuntu1.2) dapper-updates; urgency=low

  * Drop obsolete RBLs
    - dsbl.org (LP: #278075)
    - securitysage.com (LP: #289915)

 -- Scott Kitterman <email address hidden> Mon, 27 Oct 2008 20:04:11 -0400

Changed in spamassassin:
status: Fix Committed → Fix Released
Revision history for this message
Martin Pitt (pitti) wrote :

Accepted into dapper-proposed, please test and give feedback here. Please see https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

Changed in spamassassin:
status: Fix Released → Fix Committed
Changed in dapper-backports:
importance: Undecided → High
status: New → Fix Committed
Revision history for this message
Scott Kitterman (kitterman) wrote :

Invalid for jaunty (only affected earlier releases).

Changed in spamassassin:
assignee: nobody → kitterman
importance: Undecided → Medium
status: New → In Progress
assignee: kitterman → nobody
status: In Progress → Invalid
Changed in spamassassin:
status: In Progress → Fix Committed
Revision history for this message
Martin Pitt (pitti) wrote :

Accepted dapper-backports upload.

Changed in dapper-backports:
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package spamassassin - 3.1.7-2ubuntu1~dapper1

---------------
spamassassin (3.1.7-2ubuntu1~dapper1) dapper-backports; urgency=low

  * Update Dapper Spamassassin backport to last 3.1.x series release
  * Add 60_RBL-update.dpatch to drop obsolete RBLs
    - dsbl.org (LP: #278075)
    - securitysage.com (LP: #289915)

spamassassin (3.1.7-2ubuntu1) feisty; urgency=low

  * Merge from debian unstable, remaining changes:
    - debian/control:
      + libmail-spf-query-perl from Recommends to Depends for spamassassin
        binary
  * debian/control: Change Maintainer/XSBC-Original-Maintainer field.

spamassassin (3.1.7-2) unstable; urgency=high

  * Security fixes backported from 3.1.8:
    - CVE-2007-0451: potential DoS with long URIs found in the message
    content (Closes: #410843)
    - Prevents perl code from being loaded via sa-update by default
    (override with --allowplugins) (SpamAssassin bug 5240)

spamassassin (3.1.7-1ubuntu1) feisty; urgency=low

  * Merge from Debian unstable. The remaining Ubuntu changes are:
    - debian/control:
      + libmail-spf-query-perl from Recommends to Depends for spamassassin
        binary (Ubuntu: #28486)

spamassassin (3.1.7-1) unstable; urgency=low

  * New upstream release (Closes: #385450, #396600)
    - Fixes handling of PGP/MIME messages (Closes: #367365)
    - Fixes URIDNSBL warning of invalid bitwise or (Closes: #373914)
    - Fix date handling bug (Closes: #362913)

  * Fix README.Debian now that libnet-dns-perl isn't a dependency anymore
    (Closes: #374377)

spamassassin (3.1.4-1ubuntu1) edgy; urgency=low

  * Merge from Debian unstable. The remaining Ubuntu changes are:
    - debian/control:
      + libmail-spf-query-perl from Recommends to Depends for spamassassin
        binary (Ubuntu: #28486)

spamassassin (3.1.4-1) unstable; urgency=low

  * New upstream release
    - Fixed a bug where sa-update's failure would leave SA without rules
      (Closes: #370357)
    - Fix BSMTP with exim (Closes: #375286)
    - gtube.t test failed with non-english locales.
    - Fixed memory leak with Bayes and BayesStore.

 -- Scott Kitterman <email address hidden> Thu, 06 Nov 2008 00:24:21 -0500

Changed in spamassassin:
status: Fix Committed → Fix Released
Changed in spamassassin:
status: Fix Released → Fix Committed
Revision history for this message
Scott Kitterman (kitterman) wrote :

Accepted into dapper-proposed, please test and give feedback here. Please see https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package spamassassin - 3.2.3-0ubuntu1.1

---------------
spamassassin (3.2.3-0ubuntu1.1) gutsy-proposed; urgency=low

  * Add 60_RBL-update.dpatch to drop obsolete RBLs
    - dsbl.org (LP: #278075)
    - securitysage.com (LP: #289915)

 -- Scott Kitterman <email address hidden> Thu, 06 Nov 2008 15:19:17 -0500

Changed in spamassassin:
status: Fix Committed → Fix Released
Changed in spamassassin:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.