spamass-milter and IPv6

Sunday, January 31. 2010

While migrating my mailserver from Ubuntu Dapper to Debian Lenny, I noticed spamass-milter didn't want to start:

Could not parse "2001:770:017b::" as a network

After scratching my head on that for a while (it worked on the old box!) I remembered two years ago I spent some time adding IPv6 support to spamass-milter myself. Support as-in allowing IPv6 subnets to be whitelisted/auto-accepted. Very useful if you want mails from your local IPv6 machines to be accepted automatically without waiting for 10s while spamassasin is checking if you're not a spammer...

I never published the thing and now I could hardly find back the damn thing at all. :-)

http://wilmer.gaast.net/downloads/spamass-milter-ipv6.diff

Just to make sure I won't lose it again ... and maybe it'll be useful for someone else.

Also just de-Ubuntufied my laptop. Debian's doing great so far: Suspend and Resume actually work better out of the box, but fonts look a bit ugly (and sometimes really less readable I'm afraid) compared to Ubuntu...

Posted by Wilmer van der Gaast in OSS at 11:51 | Comments (6) | Trackbacks (0)

Trackbacks

Trackback specific URI for this entry

No Trackbacks

Comments

Display comments as (Linear | Threaded)

They have IPv6 in Ireland? Jeez. Over here in Richistan, we're still using good 'ol v4 with overpriced DOCSIS modems. I wish America was a free market like Europe...

#1 Tony Perrie (Homepage) on 2010-02-01 01:26 (Reply)

But that's just because you guys are sitting on the last /8s of the IPv4 address space! :-P

I don't have native IPv6 yet, just tunnels on my home networks. Being able to SSH into all machines individually without a VPN or port forwarding makes me feel special. :-P

#1.1 Wilmer on 2010-02-01 09:57 (Reply)

Good stuff, thanks for sharing.
btw: why not submit this patch to http://savannah.nongnu.org/projects/spamass-milt/ ?

#2 Beat Siegenthaler (Homepage) on 2010-09-23 14:31 (Reply)

Hrmm, I probably should've done that yeah. IIRC the project seemed rather unmaintained so I didn't.

I saw there's a bug open about this already. Did you open it? If so, feel free to drop a link to my patch there.

#2.1 Wilmer on 2010-09-25 16:42 (Reply)

I stumbled across this when trying to figure out why my IPv6 hosts are still being scanned - even when a -i exists for that subnet.

I'm pondering, do you need to include the subnet? The changelog for my spamass-milter package obtained from EPEL shows:
* Thu Sep 23 22:00:00 2010 Paul Howarth 0.3.1-21
- Add IPv6 whitelisting support (#630263)

I've emailed Paul directly to try and figure out wtf - as I'm not sure if this is your patch or not...

#2.1.1 Steven Haigh (Homepage) on 2012-01-27 04:39 (Reply)

Yup, I wrote this patch - although of course I don't know whether the changelog you're quoting there is a commit/merge of mine or something else.

It definitely just adds the ability to parse and handle v6 addresses to the whitelisting code so you do need to actually list the networks you want to whitelist, as you do with v4..

#2.1.1.1 Wilmer on 2012-01-27 08:32 (Reply)

Add Comment

Name
Email
Homepage (Fill in only if you're a spammer)
In reply to
Comment	Enclosing asterisks marks text as bold (word), underscore are made via _word_. To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly. Enter the string from the spam-prevention image above: BBCode format allowed
	Remember Information? Subscribe to this entry