[Rspamd-Users] HFILTER_HOSTNAME_UNKNOWN possible evaluation bug?

[Josef Vybíhal]

Hey,

On Thu, Oct 20, 2022 at 5:01 PM Carsten Rosenberg <cr at ncxs.de> wrote:
>
>
> Rspamd is using the provided hostname from the MTA here:
>
> https://rspamd.com/doc/lua/rspamd_task.html#m8a697
>
> You maybe should have a look why it wasn't provided. For Postfix an
> indicator would be:
>
> connect from unknown[xx.xx.xx.xx]

This is a really good catch! Indeed - for some reason MTA (postfix)
has some troubles there:

mx1 postfix/smtpd[8231]: warning: hostname repost01.tmes.trendmicro.eu
does not resolve to address 18.185.115.19: Name does not resolve


I will focus my blame away from rspamd :)



@Ged: thanks for the DNS suggestion. That was one of the things I
investigated first. To remove any doubt, I installed the latest
version of unbound locally and pointed resolv.conf to it. Manually
tested with dig +tcp, no obvious problems

dig +short rs.dns-oarc.net txt @127.0.0.1 +tcp
rst.x1188.rs.dns-oarc.net.
rst.x1198.x1188.rs.dns-oarc.net.
rst.x1204.x1198.x1188.rs.dns-oarc.net.
"193.165.209.160 sent EDNS buffer size 1232"
"193.165.209.160 DNS reply size limit is at least 1204"


Josef