dev-perl/NetAddr-IP-4.034 causes spamassassin to mistakenly (always?) trigger the ALL_TRUSTED rule. Also, at startup spamassassin issues several warnings like these: Oct 28 13:12:05.484 [18434] warn: netset: cannot include 0:0:0:0:0:0:0:1/128 as it has already been included Oct 28 13:12:05.485 [18434] warn: netset: cannot include 0:0:0:0:0:0:0:1/128 as it has already been included Oct 28 13:12:07.391 [18434] warn: netset: cannot include 0:0:0:0:0:0:0:1/128 as it has already been included Oct 28 13:12:07.391 [18434] warn: netset: cannot include 192.168.0.0/16 as it has already been included Oct 28 13:12:07.392 [18434] warn: netset: cannot include 10.x.0.0/16 as it has already been included Oct 28 13:12:07.392 [18434] warn: netset: cannot include x.x.x.x/32 as it has already been included Oct 28 13:12:07.392 [18434] warn: netset: cannot include y.y.y.y/32 as it has already been included Oct 28 13:12:07.392 [18434] warn: netset: cannot include z.z.z.z/32 as it has already been included Oct 28 13:12:07.392 [18434] warn: netset: cannot include k.k.k.k/32 as it has already been included (I don't know if they are directly related to the problem). Reproducible: Always Steps to Reproduce: 1.Upgrade dev-perl/NetAddr-IP to 4.034 2.Issue 'spamassassin -t <AMailMessageFromAnUntrustedSource' Actual Results: You see ALL_TRUSTED triggering. Most spam slips through! Expected Results: Of course, with dev-perl/NetAddr-IP-4.033 spamassassin doesn't trigger the ALL_TRUSTED rule for a mail message submitted from an external and untrusted source. dev-perl/NetAddr-IP-4.034 shouldn't have been marked stable before a workaround for this is identified in mail-filter/spamassassin .
Maybe dev-perl/NetAddr-IP-4.034 should be hardmasked? Convertion from ipv4 to ipv6 notation is broken: http://article.gmane.org/gmane.mail.spam.spamassassin.general/131120
+1 to mask it. A bug had already been filed to upstream. See: https://rt.cpan.org/Public/Bug/Display.html?id=62521
dev-perl/NetAddr-IP-4.035 is probably broken too :( https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6508 Maybe those version should be masked or add dependency to SA "<dev-perl/NetAddr-IP-4.034"
~dev-perl/NetAddr-IP-4.035 masked