Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - SURBL bug/question?
  FAQ FAQ  Forum Search   Register Register  Login Login

SURBL bug/question?

 Post Reply Post Reply
Author
Alex99 View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Alex99 Quote  Post ReplyReply Direct Link To This Post Topic: SURBL bug/question?
    Posted: 03 August 2005 at 1:24am

 

Hi there,

Whenever SURBL test is positive, NDR to sender matches one for ResponseBlacklistedMAPS= response.....

instead of one specific for SURBL test which is listed in spamfilter.ini

under ResponseBlacklistedSURBL= response.....

Is this a bug?

i qurantine rejected items from SURBL test and see "rejectDetails"

matches message for MAPS test.

Using trial version 2.6.3.473 with default ResponseBlacklistedSURBL= response.....

 

am i doing something wrong?

Many Thanks  Alex

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4106
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 03 August 2005 at 9:41pm
Alex,

We're not able to replicate this problem, everything appears to be working fine. Can you please post a section of SpamFilter's logfile that shows an email being blocked by the SURBL filter, so we may see all of the entries related to that connection? We'll then hopefully be able to remotely test your setup to see what is happening. We'll also need to see what value you have in the SpamFilter.ini file for the
"ResponseBlacklistedSURBL="
entry.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Alex99 View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Alex99 Quote  Post ReplyReply Direct Link To This Post Posted: 04 August 2005 at 3:26pm

Hi Roberto

08/03/05 01:46:28:901 -- (1848) Connection from: 195.167.116.110  -  Originating country : Greece

08/03/05 01:46:31:120 -- (1848) Resolving 195.167.116.110 - lari535-a110.otenet.gr

08/03/05 01:46:31:542 -- (1848) Mail from: Kisha7691@joewell.com

08/03/05 01:46:32:495 -- (1848) - MAPS search done...

08/03/05 01:46:32:495 -- (1848) RCPT TO: xxxxxxxxxxxxx accepted

08/03/05 01:46:34:651 -- (1848) EMail from Kisha7691@joewell.com to xxxxxxxxxxxxx passes Bayesian filter - 0% spam  (16ms)

08/03/05 01:46:34:792 -- (1848) SURBL: movitleirl.com - 521 - Sender, Your ISP mail server [movitleirl.com] is proved to be a known spamming server. Sender, your email server IP is Blacklisted by MAPS. --> multi.surbl.org. Your email cannot be delivered. Disconnecting... Blocked, movitleirl.com on lists [jp], See: http://www.surbl.org/lists.html

08/03/05 01:46:34:917 -- (1848) EMail from Kisha7691@joewell.com to xxxxxxxxxxxxx was received and quarantined. Size: 3 KB, 3072 bytes

08/03/05 01:46:34:964 -- (1008) Time to add Msg to Bayes corpus:0

08/03/05 01:46:34:979 -- (1848) Disconnect

 

NDR message generated (above) by spamfilter is one we have for MAPS test, which suggests. The response intended for ResponseBlacklistedSURBL= response.....

Is not used correctly. It appears to be a mixture of two. Very strange…

 

 

ResponseBlacklistedSURBL= 521 - Sender, your email contained a weblink, which is Blacklisted by SURBL: Please see --> %MAPSResponse%. Your email cannot be delivered. Disconnecting...

 

ResponseBlacklistedMAPS= 521 - Sender, Your ISP mail server [%IP%] is proved to be a known spamming server. Sender, your email server IP is Blacklisted by MAPS. --> %MAPSResponse%. Your email cannot be delivered. Disconnecting...

 

If problem is our end please suggest a solution. Many Thanks

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4106
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 04 August 2005 at 4:17pm
Alex,

You replaced the recipient in the logs with xxxxxxxx, but the recipient was what we needed so that we could try to replicate the problem. Withou a recipient we won't know where to send the test emails

Can you either email or private-message us with the missing information? A copy of the NDR message's content will help as well.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.246 seconds.