Chris and Dallas, Thank you for pointing this out. I will convey this back to the customer.
QQQQ ----- Original Message ----- From: "Dallas L. Engelken" <[EMAIL PROTECTED]> To: <users@spamassassin.apache.org> Sent: Tuesday, May 09, 2006 1:20 PM Subject: RE: My only problem with URIBL_BLACK | > -----Original Message----- | > From: qqqq [mailto:[EMAIL PROTECTED] | > Sent: Tuesday, May 09, 2006 14:12 | > To: Chris Santerre; 'Matt Kettler' | > Cc: users@spamassassin.apache.org | > Subject: Re: My only problem with URIBL_BLACK | > | > RE: My only problem with URIBL_BLACKHere's one that just got | > captured. The mailing was from Monster.com and the customer | > is livid :-( | > | > X-Spam-Report: | > * 0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts | > * 1.1 URIBL_SBL Contains an URL listed in the SBL blocklist | > * [URIs: uhmcargo_MUNGED.net] | > * 3.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist | > * [URIs: uhmcargo_MUNGED.net] | > * 3.4 URIBL_JP_SURBL Contains an URL listed in the JP SURBL | > blocklist | > * [URIs: uhmcargo_MUNGED.net] | > | > I had to _MUNGED the domain because the mailing hit 13.5 and bounced | > | > The threshold is 5.5 | > | > | > Here is from my original stats post: | > 1 URIBL_BLACK 163397 7.09 29.11 | > 78.05 0.50 | > 5 URIBL_JP_SURBL 118251 5.13 21.07 | > 56.48 0.09 | > | > What are your thoughts guys? Lower the score for URI_BLACK and JP? | > | | seriously? the domains is 3 days old and is unreachable, and uses | outfitter.net NS's which appear to have an identity crisis. | | April 25th, | ns1.outfiter.net 206.173.156.105 | ns2.outfiter.net 24.98.13.40 | | April 27th, | ns1.outfiter.net 24.182.165.233 | ns2.outfiter.net 67.64.112.94 | | May 4th, | ns1.outfiter.net 24.247.114.91 | ns2.outfiter.net 68.36.53.205 | | May 8th, | ns1.outfiter.net 24.168.96.193 | ns2.outfiter.net 24.247.114.91 | | Right Now, | ns1.outfitter.net 66.199.187.181 | ns2.outfitter.net 66.199.187.181 | | | | | | | | dallas | | |