On Saturday 13 Aug 2005 12:29, Dirk Bonengel wrote: > FYI: > rfc-ignorant.org has .de listed in whois.rfc-ignorant.com. > > http://www.rfc-ignorant.org/tools/detail.php?domain=de&submitted=1120996396&table=whois > In a standard 3.0.x install, DNS_FROM_RFC_WHOIS gives a score of 0.492 > (net) or 0.296 (net+bayes).
This shouldn't cause problems as RFCI whois returns 127.0.0.7 for entire TLD based domains, and 127.0.0.5 for others and SA (at least 3.0.4) only tests for 127.0.0.5. See the listing policy at <http://www.rfc-ignorant.org/policy-whois.php>. $ grep DNS_FROM_RFC_WHOIS /usr/share/spamassassin/* /usr/share/spamassassin/20_dnsbl_tests.cf:header DNS_FROM_RFC_WHOIS eval:check_rbl_sub('rfci_envfrom', '127.0.0.5') /usr/share/spamassassin/20_dnsbl_tests.cf:describe DNS_FROM_RFC_WHOIS Envelope sender in whois.rfc-ignorant.org /usr/share/spamassassin/20_dnsbl_tests.cf:tflags DNS_FROM_RFC_WHOIS net /usr/share/spamassassin/30_text_de.cf:lang de describe DNS_FROM_RFC_WHOIS Absender in whois-Liste von www.rfc-ignorant.org /usr/share/spamassassin/50_scores.cf:score DNS_FROM_RFC_WHOIS 0 0.492 0 0.296 e.g.: $ host de.whois.rfc-ignorant.org de.whois.rfc-ignorant.org has address 127.0.0.7 $ host wot-2.com.whois.rfc-ignorant.org wot-2.com.whois.rfc-ignorant.org has address 127.0.0.5 -- Rob Skedgell <[EMAIL PROTECTED]>
pgp6RdRXo1y7G.pgp
Description: PGP signature
