Sounds like an surbl problem if spamsite.com isn't listed. The leading
subdomains are supposed to be trimmed off, since they are usually
identifying strings for a given spam target rather than an actual part of
the target name. There are a few cases where things go to three levels
rather than just two, but they are exceptions.
Loren
----- Original Message -----
From: "Charles Sprickman" <[EMAIL PROTECTED]>
To: <users@spamassassin.apache.org>
Sent: Thursday, July 21, 2005 7:28 PM
Subject: URIDNSBL and subdomains
> Hello,
>
> I've been watching some of the misses that have passed through
> spamassassin (3.0.4) lately and they are pretty clean; no DNS BL hits,
> etc.
>
> One thing I did notice is that many of them have a fairly contorted URL
> for the spamvertized products, ie:
>
> kjekliennxi&ffiennnkenc.spamsite.com
>
> This doesn't trigger any URIDNSBL hits, but if I punch the entire URI into
> the surbl.org checker it does hit. It seems as if the SA check is looking
> only at the domain part and not the subdomain.
>
> Is this expected? Is there a switch to flip to get the whole hostname
> checked?
>
> Thanks,
>
> Charles
>
> ___
> Charles Sprickman
> NetEng/SysAdmin
> Bway.net - New York's Best Internet - www.bway.net
> [EMAIL PROTECTED] - 212.655.9344
