Re: URIDNSBL and subdomains

[Charles Sprickman]

On Thu, 21 Jul 2005, Loren Wilton wrote:

Sounds like an surbl problem if spamsite.com isn't listed.

That's just an example I made up... :)

The leading subdomains are supposed to be trimmed off, since they are 
usually identifying strings for a given spam target rather than an 
actual part of the target name.

OK, so that's supposed to happen.  Is there any way to have the entire 
host checked?  I've seen a good volume of junk where the domain is clean, 
but if I do a manual lookup on the entire hostname in the spam it is 
indeed listed.

Thanks,

Charles

There are a few cases where things go 
to three levels rather than just two, but they are exceptions.

       Loren


----- Original Message -----
From: "Charles Sprickman" <[EMAIL PROTECTED]>
To: <users@spamassassin.apache.org>
Sent: Thursday, July 21, 2005 7:28 PM
Subject: URIDNSBL and subdomains


Hello,

I've been watching some of the misses that have passed through
spamassassin (3.0.4) lately and they are pretty clean; no DNS BL hits,
etc.

One thing I did notice is that many of them have a fairly contorted URL
for the spamvertized products, ie:

kjekliennxi&ffiennnkenc.spamsite.com

This doesn't trigger any URIDNSBL hits, but if I punch the entire URI into
the surbl.org checker it does hit.  It seems as if the SA check is looking
only at the domain part and not the subdomain.

Is this expected?  Is there a switch to flip to get the whole hostname
checked?

Thanks,

Charles

___
Charles Sprickman
NetEng/SysAdmin
Bway.net - New York's Best Internet - www.bway.net
[EMAIL PROTECTED] - 212.655.9344