You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2005/09/14 21:49:10 UTC
[Bug 4583] New: INFO_TLD Bug
http://bugzilla.spamassassin.org/show_bug.cgi?id=4583
Summary: INFO_TLD Bug
Product: Spamassassin
Version: unspecified
Platform: All
URL: http://www.infonews.ro
OS/Version: other
Status: NEW
Severity: normal
Priority: P5
Component: Rules
AssignedTo: dev@spamassassin.apache.org
ReportedBy: catalin@golban.ro
CC: catalin@golban.ro
Hi everybody
Emails from one of my domains (http://www.infonews.ro) are rejected and marked
as spam, one of the reason being "INFO_TLD".
But this domain is not a .info domain.
Thanks
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4583] INFO_TLD Bug
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4583
------- Additional Comments From sidney@sidney.com 2005-09-14 15:14 -------
To clarify my previous commment: When I look at the INFO_TLD rule I don't see
any way that it could match the domain infonews.ro, and when I try out an
example containing infonews.ro the rule does not fire. So either your email has
some other URL in it that does have a .info domain or else you have found some
bug that is demonstrated by the email message in which you are seeing the problem.
The only way we can resolve this is to see an example with all of its details.
That means that the entire email should be attached as a file using the Create
Attachment link in Bugzilla, so that no information that may be critical to
understanding the bug is lost.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4583] INFO_TLD Bug
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4583
------- Additional Comments From sidney@sidney.com 2005-09-17 01:04 -------
> Isn't a posibility for the scanner to detect the .info from
> www<b>.INFO</b>news.ro ?
When I test that I find that it is not detected as INFO_TLD. But that does show
the importance of attaching your actual email here if you want us to be able to
see something that may be wrong in SpamAssassin in dealing with it. Something in
your email is triggering INFO_TLD. If you don't have an actual .info URL in
there, please attache the full email so we can figure out what in the mail is
triggering the rule.
It appears that this has been brought to the attention of the Outblaze people,
so infonews.ro can be removed from their blocklist if it is not supposed to be
on there.
As was mentioned here before, being on that blocklist will add two points to the
score of the emails that you send out. Getting off that list should be your
first priority to avoid having your mail labeled as spam.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4583] INFO_TLD Bug
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4583
------- Additional Comments From jeffc@surbl.org 2005-09-17 00:09 -------
FWIW I've mentioned infonews.ro as a possible FP to Suresh at Outblaze and asked
him to unlist if appropriate. Thanks for spotting it Sidney.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4583] INFO_TLD Bug
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4583
------- Additional Comments From catalin@golban.ro 2005-09-15 05:01 -------
Created an attachment (id=3140)
--> (http://bugzilla.spamassassin.org/attachment.cgi?id=3140&action=view)
Email headers
This is what I have.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4583] INFO_TLD Bug
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4583
------- Additional Comments From jeffc@surbl.org 2005-09-17 05:41 -------
The domain infonews.ro has been removed form ob.surbl.org. Sidney's points
remain quite relevant.
1. You should include a sample message or at least a sample URI from a blocked
message so that others can test and see if they get the same result. In
particular if you think there's some kind of parsing error of the kind you are
suggesting, there is no way to confirm or test it without some sort of example.
2. Removing false positives such as this domain from the blacklist source is the
first priority since it is the most obvious source of the blocking.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4583] INFO_TLD Bug
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4583
------- Additional Comments From sidney@sidney.com 2005-09-14 13:16 -------
Please attach a sample mail showing the SpamAssassin headers that show an
INFO_TLD match. Do not copy and paste it in a comment here. Save the complete
email with all headers as a file and attach the file using the "create New
Attachment" link in Bugzilla. That will allow us to properly reproduce and fix
the problem.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4583] INFO_TLD Bug
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4583
------- Additional Comments From catalin@golban.ro 2005-09-17 00:31 -------
Isn't a posibility for the scanner to detect the .info from
www<b>.INFO</b>news.ro ?
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4583] INFO_TLD Bug
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4583
sidney@sidney.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |WORKSFORME
------- Additional Comments From sidney@sidney.com 2005-09-15 12:03 -------
Expanding on Daryl's comment:
What you attached is the bounce message from the server, which explains why your
email was rejected, but does not include the complete mail that was rejected.
Without seeing that complete email, I can't say why it triggered the INFO_TLD
rule. I would bet that if you looked at the mail itself you would find that it
does contain a link inside of it to some web site in the .info domain.
There is a problem in that the mail server at intel.cybernet.ro is not using
SpamAssassin the way it was designed. They have set it to mark as spam mail with
a score threshold of 4.5 instead of the 5.0 threshold it was tuned for. Worse,
they automatically bounce the mail at that threshold instead of placing it in a
"possible spam" graymail folder that can be checked for errors. They must be
rejecting a lot of legitimate email with those settings.
Of course you probably have no say as to how your customer's ISP or IT
department configure their mail server. But your customer may want to know that
whoever is running their mail server is probably rejecting much legitiamte email.
The INFO_TLD rule contributes only 0.481 points to that total. The
URIBL_OB_SURBL is the serious one, with 1.996 points. Somewhere in the email is
a link to a web site that has been identified as being advertised in spam and is
on teh OutBlaze list. See http://www.surbl.org/lists.html#ob for information
about that list. If your newsletter advertises web sites that are known to be
advertised in spam, then you will get a high score.
In summary, 1) check your original email and verify that the links in there do
not contain web sites that are advertised by spammers; 2) Advertising .info
sites will not by itself get you marked as spam, only add 0.48 points to the
score; 3) It is almost certainly not caused by infonews.ro in a URL; 4) The site
that bounced your message has a very bad configuration for someone who expects
to receive email.
I'm closing this bug as WORKSFORME because as far as I can tell infonews.ro is
handled correctly by SpamAssassin. If you can come up with an email that
contains an infonews.ro URL and does not contain any .info URL but still is
marked as INFO_TLD, please reopen this bug and attach that email with evidence
that SpamAssassin did trigger the INFO_TLD rule on that email.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4583] INFO_TLD Bug
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4583
------- Additional Comments From spamassassin@dostech.ca 2005-09-15 10:22 -------
That message isn't the message you sent, nor the one that was scanned. As such
it is of no use. If I were to speculate, I'd say your newsletter probably
contained a ".info" address.
In any case, I'd be more concerned about your OutBlaze listing.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.