Bug 191033 - spamassassin looks up broken NS domain (visi.com)
Summary: spamassassin looks up broken NS domain (visi.com)
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: spamassassin
Version: 4.0
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
: ---
Assignee: Warren Togami
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 171491
TreeView+ depends on / blocked
 
Reported: 2006-05-08 10:51 UTC by Bastien Nocera
Modified: 2007-11-30 22:07 UTC (History)
1 user (show)

Fixed In Version: RHSA-2006-0543
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2006-06-06 17:54:49 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
spamassassin-3.1-visi.patch (1.62 KB, patch)
2006-05-08 10:51 UTC, Bastien Nocera
no flags Details | Diff
spamassassin-3.0.5-RSL-removal.patch (3.20 KB, patch)
2006-05-09 22:04 UTC, Warren Togami
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2006:0543 0 normal SHIPPED_LIVE Moderate: spamassassin security update 2006-06-06 04:00:00 UTC

Description Bastien Nocera 2006-05-08 10:51:55 UTC
spamassassin-3.0.5-3.el4

The Spamassassin rules contains lookups to relays.visi.com, which can cause
excessive loads (and then timeouts) on the nameserver used.

Patch from Brad Hinson <bhinson> to disable those lookups (as in
Spamassassin 3.1) attached.

Comment 1 Bastien Nocera 2006-05-08 10:51:56 UTC
Created attachment 128737 [details]
spamassassin-3.1-visi.patch

Comment 3 Warren Togami 2006-05-08 22:26:09 UTC
What kind of delays per message are you seeing?


Comment 4 Brad Hinson 2006-05-09 01:26:46 UTC
Check out these links:
http://mail-archives.apache.org/mod_mbox/spamassassin-users/200501.mbox/%3C6.2.0.14.0.20050104182350.02f4f418@192.168.50.2%3E
http://wiki.openrbl.org/wiki/VISI

relays.visi.com had two nameservers, ns1.visi.com and ns2.visi.com.  ns1 is
still working, but ns2 is not.  When dns queries go to ns2, there's a timeout of
about a couple of seconds.  Customer who reported this had heavy dns traffic,
and this timeout eventually caused all further requests to timeout, rendering
the nameserver useless until restarted.

Comment 5 Warren Togami 2006-05-09 16:49:15 UTC
dev ack, trivial


Comment 6 Warren Togami 2006-05-09 22:04:08 UTC
Created attachment 128821 [details]
spamassassin-3.0.5-RSL-removal.patch

Completely remove RCVD_IN_RSL rule.

Comment 10 Red Hat Bugzilla 2006-06-06 17:54:49 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2006-0543.html



Note You need to log in before you can comment on or make changes to this bug.