mahara-contributors team mailing list archive

[Robert Lyon <robertl@xxxxxxxxxxxxxxx>]

** Changed in: mahara/17.04
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1662367

Title:
  False positives in antispam checking

Status in Mahara:
  Fix Committed
Status in Mahara 15.04 series:
  In Progress
Status in Mahara 15.10 series:
  In Progress
Status in Mahara 16.04 series:
  In Progress
Status in Mahara 16.10 series:
  In Progress
Status in Mahara 17.04 series:
  Fix Committed

Bug description:
  Antispam check was return false positives for domains that are not on
  spam list

  To test:

  Create a site and then
  1) Edit the Configuration -> Security settings
  and set Anti-spam to 'Advanced'
  Turn on Spamhaus and SURBL URL blacklists
  And save the settings

  2) Create a group and create a forum post
  In your forum post add a url in the TinyMCE Editor, eg http://aaeebl.org
  And save the post

  You should be alerted that the url is blacklisted (you may not be
  alerted - it all depends on the third party response)

  You can check via terminal what is happening as well, eg for
  aaeebl.org you can do

  dig aaeebl.org.black.uribl.com

  dig aaeebl.org.spamhaus.org

  dig aaeebl.org.multi.surbl.com

  
  If any of the results have an A record in the answer section then the domain name is on a blacklist
  Except if the A record is 127.0.0.1 - this means the request has been rejected before testing

  also try
  dig aaeebl.org.multi.surbl.org

  This should pass where the .com version is failing

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1662367/+subscriptions