> I'm running SpamAssassin version 3.3.0 and we received some spam > recently > which contained a link to a .ru.gg domain. While investigating whether > it > was listed in any of the URIBLs I discovered that if a message contains > a > link to "http://qwerty.ru.gg";, spamassassin only looks up the domain > "ru.gg" > - here's a snippet from the log: > > Jul 14 07:55:54.785 [3269] dbg: async: timing: 0.026 . > DNSBL:dob.sibl.support-intelligence.net:ru.gg > Jul 14 07:55:54.785 [3269] dbg: async: timing: 0.027 . > DNSBL:multi.uribl.com.:ru.gg > > However if I edit the message, change the link to > "http://qwerty.ru.com"; and > run it through spamassassin again, then the URIBL lookups are done for > the > full domain name: > > Jul 14 08:52:49.412 [16122] dbg: async: timing: 0.287 . > DNSBL:dob.sibl.support-intelligence.net:qwerty.ru.com > Jul 14 08:52:49.412 [16122] dbg: async: timing: 0.290 . > DNSBL:multi.uribl.com.:qwerty.ru.com > > This can't be right, can it? It looks like the gg top-level domain > isn't > being handled properly. Any ideas?
I don't see why you believe querty.ru.gg == querty.ru.com . .gg is a gTLD (for the Bailiwick of Guernsey, according to http://en.wikipedia.org/wiki/.gg). > Dave Giampaolo
