diff options
| author | Vsevolod Stakhov <vsevolod@highsecure.ru> | 2016-01-15 22:06:27 +0000 |
|---|---|---|
| committer | Vsevolod Stakhov <vsevolod@highsecure.ru> | 2016-01-15 22:06:27 +0000 |
| commit | 6ef35e3b2219338be95a1f1fc31f77c5c8cbed29 (patch) | |
| tree | cfeb39368ff3a43bf12e0f268a020a90afb2a297 /src/libserver | |
| parent | 734034db2f98ae71cc7b53ad4d8d56b295a72a0b (diff) | |
| download | rspamd-6ef35e3b2219338be95a1f1fc31f77c5c8cbed29.tar.gz rspamd-6ef35e3b2219338be95a1f1fc31f77c5c8cbed29.zip | |
Ignore SPF results in case of DNS failure
Diffstat (limited to 'src/libserver')
| -rw-r--r-- | src/libserver/spf.c | 18 | ||||
| -rw-r--r-- | src/libserver/spf.h | 2 |
2 files changed, 18 insertions, 2 deletions
diff --git a/src/libserver/spf.c b/src/libserver/spf.c index 31dba5d89..fde0030d3 100644 --- a/src/libserver/spf.c +++ b/src/libserver/spf.c @@ -299,7 +299,11 @@ rspamd_spf_process_reference (struct spf_resolved *target, for (i = 0; i < elt->elts->len; i++) { cur = g_ptr_array_index (elt->elts, i); - if (!(cur->flags & RSPAMD_SPF_FLAG_PARSED)) { + if (cur->flags & RSPAMD_SPF_FLAG_TEMPFAIL) { + target->failed = TRUE; + continue; + } + else if (!(cur->flags & RSPAMD_SPF_FLAG_PARSED)) { /* Ignore unparsed addrs */ continue; } @@ -337,7 +341,7 @@ rspamd_spf_record_flatten (struct spf_record *rec) g_assert (rec != NULL); - res = g_slice_alloc (sizeof (*res)); + res = g_slice_alloc0 (sizeof (*res)); res->elts = g_array_sized_new (FALSE, FALSE, sizeof (struct spf_addr), rec->resolved->len); res->domain = g_strdup (rec->sender_domain); @@ -673,6 +677,16 @@ spf_record_dns_callback (struct rdns_reply *reply, gpointer arg) break; } } + else { + cb->addr->flags |= RSPAMD_SPF_FLAG_TEMPFAIL; + msg_info_spf ( + "<%s>: spf error for domain %s: cannot resolve DNS record for" + " %s: %s", + task->message_id, + cb->rec->sender_domain, + cb->resolved->cur_domain, + rdns_strerror (reply->code)); + } rspamd_spf_maybe_return (cb->rec); } diff --git a/src/libserver/spf.h b/src/libserver/spf.h index 9e875b515..25905f894 100644 --- a/src/libserver/spf.h +++ b/src/libserver/spf.h @@ -36,6 +36,7 @@ typedef enum spf_action_e { #define RSPAMD_SPF_FLAG_VALID (1 << 5) #define RSPAMD_SPF_FLAG_REFRENCE (1 << 6) #define RSPAMD_SPF_FLAG_REDIRECT (1 << 7) +#define RSPAMD_SPF_FLAG_TEMPFAIL (1 << 8) struct spf_addr { guchar addr6[sizeof (struct in6_addr)]; @@ -56,6 +57,7 @@ struct spf_addr { struct spf_resolved { gchar *domain; guint ttl; + gboolean failed; GArray *elts; /* Flat list of struct spf_addr */ ref_entry_t ref; /* Refcounting */ }; |