stefan sec zehl mra42org hi tue feb 26 2008 1626 0000 justin mason wrote stefan sec zehl writes ok youre telling bug known went unfixed fot year unfortunately nobody whos bothered bothered fixing sending us patch ill omit comments ipv6 users yes know infinite time itd fixed ok patch fixes specific ipv6 problem someone time make sa completely v6 aware mailspamassassinmessagemetadatareceivedpmorig 20080226 172828000000000 0100 mailspamassassinmessagemetadatareceivedpm 20080226 172852000000000 0100 12087 12088 ip mailspamassassinutilextract_ipv4_addr_from_string ip ip dbgreceivedheader could parse ipv4 address assuming ipv6 return 0 ignore ipv6 handovers return 0 ignore ipv6 handovers ip0000 disabled cut localhosttolocalhost smtp handovers bigger problem remains ipv6 stuff main problem first received header reason ever unparsable spammercontrolled headers trusted auth part would say default definitely wrong way round bug needs fixing right way parse ipv6 headers far hasnt significant problem since think first example ive seen spam traversing ipv6 networks arrive trusted network point reason misparse receivedheader leads automatic trusting untrusted headers trust sa never misparse receivedline seen inside function tons regexps would trust completely bugfree may well first person report spam quite sure people spam mistakenly getting all_trusted label checks headers spammailbox regularely im stupid user cares hardly representative attitude ill take word miffed realizing half day debugging found year old bug still unfixed cu sec hofstadters law everything takes longer expect even taking account hofstadters law fri 08 aug 2008 034151 0100 sa trusts hosts soon ipv6 enabled awl problem assigning low scores spam