You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2007/10/30 11:47:39 UTC

[Bug 5706] New: False postiv for URIBL_BLACK and WHOIS_MONIKER_PRIV

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5706

           Summary: False postiv for URIBL_BLACK and WHOIS_MONIKER_PRIV
           Product: Spamassassin
           Version: 3.2.3
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: major
          Priority: P2
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: frank.urban@commerzbank.com


we got some mails from 
bankofamerica.com 
and URIBL_BLACK  and WHOIS_MONIKER_PRIV reporting that 
     famerica.com 
is on their blacklist.

2.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                           [URIs: famerica.com]
2.6 WHOIS_MONIKER_PRIV     URL registered to Moniker Privacy Protection
                           [URIs: famerica.com]



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5706] False postiv for URIBL_BLACK and WHOIS_MONIKER_PRIV

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5706





------- Additional Comments From frank.urban@commerzbank.com  2007-10-31 05:11 -------
I think also in case of a line break and/or multiple lines it must be possible
to check if there is a "." or a "@" at the beginning of the domain name to be
shure that this is the full domain name. Or am I wrong?




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5706] False postiv for URIBL_BLACK and WHOIS_MONIKER_PRIV

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5706





------- Additional Comments From jm@jmason.org  2007-10-30 04:48 -------
that sounds like a corrupted message to me.

Can you provide a sample message that triggers it?  feel free to obsfucate all
account numbers etc.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5706] False postiv for URIBL_BLACK and WHOIS_MONIKER_PRIV

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5706





------- Additional Comments From jm@jmason.org  2007-10-31 05:14 -------
why would a full domain name contain a "." at the start of the name?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5706] False postiv for URIBL_BLACK and WHOIS_MONIKER_PRIV

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5706





------- Additional Comments From alex.uribl@gmail.com  2007-10-31 04:45 -------
Its beloved Lotus Notes which has a tendency to do all kinds of things with lines.





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.