random ticket URLs in email notifications

[ivan@…]

Notification emails concerning changes to tickets contain a ticket URL at the bottom of the email, i.e. "Ticket URL: <…>".

On a few such notifications sent by Trac, I noticed an incorrect and seemingly random ticket URL. Here are two examples:

• Ticket URL: <​http://novastat.ru/ticket/41>
• Ticket URL: <​http://109.87.45.228/ticket/41#comment:2>

Generating a comment notification on the ticket that generated an email with such a Ticket URL previously sometimes changes the URL in the comment notification to a new random IP\domain string (is there a reverse DNS look-up happening?), and sometimes maintains the previous string.

Since the issue was initially observed, there have been tickets that did not have this behavior, and which had the correct Ticket URLs in the notification emails. Therefore I can't reproduce this with certainty except by altering an existing ticket that is known to have this issue.

This issue appeared after more than a year of running this particular Trac. So it is unlikely that it is reproducible. However, if I am pointed to where to look in the installation\code to instrument Trac to get to the bottom of this then I can try to figure it out.

System Information:

• Ubuntu 10.04 LTS
• Python2.5
• Sqlite
• SVN

[Remy Blank]

Could the machine have been compromised? Is your site at least related to the "random" hostnames and IP addresses, or have you no idea where they come from?

[ivan@…]

I don't believe its compromised. I've ran rkhunter and chkrootkit and thoroughly looked through the essential logs.

The site isn't related to the hostnames and IP addresses at all, so I have no idea where they are from.

[Christian Boos]

Have a look at the [trac] base_url setting, this is an InstallationIssue.