LogSat Software

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   Dear all,

I've a stange think with Spamfilter 2.7.531 (same with previous versions):

An spammer send email with link ('www.aqpqq.org/snyyh/pl3/') which is not denied by surbl filter. When I make a test, if I send email with 'http://www.aqpqq.org' in text, spamfilter denied message, if I send email with 'www.aqpqq.org', spamfilter accept email (without 'http://')

When I lookup on http://www.rulesemporium.com/, that's true that domain blacklisted... So, if the domain name start with www. (without http://) SUBRL don't black list email.

Is there a way to blacklist an email when domain is in SURBL, even if the domain in the email's text is not beginning with 'http://' ?

Thank you for reply  

Best regards.

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
Raphael Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 22 February 2006 Location: France Status: Offline Points: 1	Post Options Post Reply Quote Raphael Report Post Thanks(0) Quote Reply Topic: SURBL question Posted: 22 February 2006 at 6:33am
	Dear all, I've a stange think with Spamfilter 2.7.531 (same with previous versions): An spammer send email with link ('www.aqpqq.org/snyyh/pl3/') which is not denied by surbl filter. When I make a test, if I send email with 'http://www.aqpqq.org' in text, spamfilter denied message, if I send email with 'www.aqpqq.org', spamfilter accept email (without 'http://') When I lookup on http://www.rulesemporium.com/, that's true that domain blacklisted... So, if the domain name start with www. (without http://) SUBRL don't black list email. Is there a way to blacklist an email when domain is in SURBL, even if the domain in the email's text is not beginning with 'http://' ? Thank you for reply Best regards.

WebGuyz Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 09 May 2005 Location: United States Status: Offline Points: 348	Post Options Post Reply Quote WebGuyz Report Post Thanks(0) Quote Reply Posted: 22 February 2006 at 9:45am
	Thats a good question, what logic is used for SURBL parsing of the email itself. Does SF check for "<a href=" or just the pressence of "http://"? We maintain a private SURBL fed by a script that parses spam emails that get through and I keep seeing the same ones coming through so I'm thinking that maybe your programming logic and mine are not in sync. Most of the ones in question are those without a <a href= but do have a http;// but not as a link, just as text. Thanks!!
	http://www.webguyz.net

LogSat Members Profile Send Private Message Find Members Posts Add to Buddy List Admin Group Joined: 25 January 2005 Location: United States Status: Offline Points: 4106	Post Options Post Reply Quote LogSat Report Post Thanks(0) Quote Reply Posted: 22 February 2006 at 9:52am
	We'd like to keep the details of exactly how the SURBL filter is working private if possible to avoid helping spammers. I'll be sending a private forum message to both to answer your questions, but please do not make them public.
	Roberto Franceschetti LogSat Software Spam Filter ISP

LogSat Software

Site Navigation[Skip]

Spam Filter ISP Support Forum

SURBL question