SURBL bug/question?
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5287
Printed Date: 23 November 2025 at 1:52pm
Topic: SURBL bug/question?
Posted By: Guests
Subject: SURBL bug/question?
Date Posted: 03 August 2005 at 1:24am
|
Hi there, Whenever SURBL test is positive, NDR to sender matches one for ResponseBlacklistedMAPS= response..... instead of one specific for SURBL test which is listed in spamfilter.ini under ResponseBlacklistedSURBL= response..... Is this a bug? i qurantine rejected items from SURBL test and see "rejectDetails" matches message for MAPS test. Using trial version 2.6.3.473 with default ResponseBlacklistedSURBL= response.....
am i doing something wrong? Many Thanks Alex |
Replies:
Posted By: LogSat
Date Posted: 03 August 2005 at 9:41pm
|
Alex, We're not able to replicate this problem, everything appears to be working fine. Can you please post a section of SpamFilter's logfile that shows an email being blocked by the SURBL filter, so we may see all of the entries related to that connection? We'll then hopefully be able to remotely test your setup to see what is happening. We'll also need to see what value you have in the SpamFilter.ini file for the "ResponseBlacklistedSURBL=" entry. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: Guests
Date Posted: 04 August 2005 at 3:26pm
|
Hi Roberto 08/03/05 01:46:28:901 -- (1848) Connection from: 195.167.116.110 - Originating country : Greece 08/03/05 01:46:31:120 -- (1848) Resolving 195.167.116.110 - lari535-a110.otenet.gr 08/03/05 01:46:31:542 -- (1848) Mail from: Kisha7691@joewell.com 08/03/05 01:46:32:495 -- (1848) - MAPS search done... 08/03/05 01:46:32:495 -- (1848) RCPT TO: xxxxxxxxxxxxx accepted 08/03/05 01:46:34:651 -- (1848) EMail from Kisha7691@joewell.com to xxxxxxxxxxxxx passes Bayesian filter - 0% spam (16ms) 08/03/05 01:46:34:792 -- (1848) SURBL: movitleirl.com - 521 - Sender, Your ISP mail server [movitleirl.com] is proved to be a known spamming server. Sender, your email server IP is Blacklisted by MAPS. --> multi.surbl.org. Your email cannot be delivered. Disconnecting... Blocked, movitleirl.com on lists [jp], See: http://www.surbl.org/lists.html 08/03/05 01:46:34:917 -- (1848) EMail from Kisha7691@joewell.com to xxxxxxxxxxxxx was received and quarantined. Size: 3 KB, 3072 bytes 08/03/05 01:46:34:964 -- (1008) Time to add Msg to Bayes corpus:0 08/03/05 01:46:34:979 -- (1848) Disconnect NDR message generated (above) by spamfilter is one we have for MAPS test, which suggests. The response intended for ResponseBlacklistedSURBL= response..... Is not used correctly. It appears to be a mixture of two. Very strange… ResponseBlacklistedSURBL= 521 - Sender, your email contained a weblink, which is Blacklisted by SURBL: Please see --> %MAPSResponse%. Your email cannot be delivered. Disconnecting... ResponseBlacklistedMAPS= 521 - Sender, Your ISP mail server [%IP%] is proved to be a known spamming server. Sender, your email server IP is Blacklisted by MAPS. --> %MAPSResponse%. Your email cannot be delivered. Disconnecting... If problem is our end please suggest a solution. Many Thanks |
Posted By: LogSat
Date Posted: 04 August 2005 at 4:17pm
|
Alex, You replaced the recipient in the logs with xxxxxxxx, but the recipient was what we needed so that we could try to replicate the problem. Withou a recipient we won't know where to send the test emails  Can you either email or private-message us with the missing information? A copy of the NDR message's content will help as well. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |