It means that if you were using BL at MTA level your SA might never have seen the message at all.
No your rule would not be "overlooked" 'because the site is in a blacklist' *unless* you were using the BL in your MTA and rejected the transaction from a blacklisted IP address and, thus, never submitted it to SA at all. And those rules did not hit on the message because there isn't anything in there that they are designed to find. It does not represent another variation on the theme. But since there is a lot of other stuff that other rules did hit on, why are you worrying so much about just these few? >>> Dan Schaefer <d...@performanceadmin.com> 07/22/09 3:56 PM >>> Benny Pedersen wrote: > On Wed, July 22, 2009 21:39, Dan Schaefer wrote: > >> For those of you that manage these rules, >> URI_OBFU_X9_WS, URI_OBFU_WWW, AE_MEDS38, AE_MEDS39 did not mark this email >> as spam >> http://pastebin.com/m40f7cff4 >> > > reject it with rbl testing in mta, and its found in blacklist, reason it not > found in obfu is that its not obfu :) > > Does this mean that if I have a custom rule to search for exactly the "via" site, my rule will be overlooked because the site is in a blacklist? -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.
