[Bug 551655] Re: open-whois.org is cybersquatted and its rules should be removed from Spamassassin

[Derek Simkowiak]

If I understood Mathias' comment, he just wants somebody to do steps one
and two of the update procedure to justify backporting this bug.

So, here goes:

Step 1: The bug is fixed in the latest branch, and it is flagged "fixed
released" (as per above).  Done.

Step 2: I am updating the bug description with the required information
below.

Step 2.1: The impact is that users of 8.04 are getting false positives
from SpamAssassin.  I'm seeing it on an eBox system (eBox is an email
system based on Ubuntu that includes SpamAssassin).

Step 2.2: The bug was addressed as per this bug report.  (See above.)

Step 2.3: Patch: I don't have one, sorry.  The patch is just to remove
all the open-whois.org from /usr/share/spamassassin/72_active.cf ; the
patch used above should suffice.

Step 2.4: To repro the bug: let SpamAssassin filter a mail and flag it
(as per defaults).  You'll see a header like:

    X-Spam-Status: No, score=2.431 required=5
tests=[DNS_FROM_OPENWHOIS=2.431]

    Once the fix is in place the DNS_FROM_OPENWHOIS rule (and all other
open-whois.org rules) should be gone.


Step 2.5: I don't see how a regression could "inadvertently" be affected.  The open-whois.org service is dead, the domain has been taken by a squatter, and 100% of all SpamAssassin installs should have these rules removed.


    I hope the lack of a patch won't prevent this from getting backported.  I'm as excited about 10.4 as anyone, but I won't be upgrading my email systems for several weeks or months.  (The OpenLDAP upgrade is broken, due to cn=config and bugs like #364531, so moving from 8.04 to 10.4 for my email systems will be a huge investment of time.)


Thank You,
Derek Simkowiak

-- 
open-whois.org is cybersquatted and its rules should be removed from Spamassassin
https://bugs.launchpad.net/bugs/551655
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to spamassassin in ubuntu.