What I am asking is why a reference to http://querty.ru.gg generates a URI
lookup for ru.gg (ie missing out the first component) whereas a reference to
http://qwerty.ru.com generates a URI lookup for qwerty.ru.com.

Dave


Giampaolo Tomassoni-2 wrote:
> 
>> I'm running SpamAssassin version 3.3.0 and we received some spam
>> recently
>> which contained a link to a .ru.gg domain. While investigating whether
>> it
>> was listed in any of the URIBLs I discovered that if a message contains
>> a
>> link to "http://qwerty.ru.gg";, spamassassin only looks up the domain
>> "ru.gg"
>> - here's a snippet from the log:
>> 
>> Jul 14 07:55:54.785 [3269] dbg: async: timing: 0.026 .
>> DNSBL:dob.sibl.support-intelligence.net:ru.gg
>> Jul 14 07:55:54.785 [3269] dbg: async: timing: 0.027 .
>> DNSBL:multi.uribl.com.:ru.gg
>> 
>> However if I edit the message, change the link to
>> "http://qwerty.ru.com"; and
>> run it through spamassassin again, then the URIBL lookups are done for
>> the
>> full domain name:
>> 
>> Jul 14 08:52:49.412 [16122] dbg: async: timing: 0.287 .
>> DNSBL:dob.sibl.support-intelligence.net:qwerty.ru.com
>> Jul 14 08:52:49.412 [16122] dbg: async: timing: 0.290 .
>> DNSBL:multi.uribl.com.:qwerty.ru.com
>> 
>> This can't be right, can it? It looks like the gg top-level domain
>> isn't
>> being handled properly. Any ideas?
> 
> I don't see why you believe querty.ru.gg == querty.ru.com .
> 
> .gg is a gTLD (for the Bailiwick of Guernsey, according to
> http://en.wikipedia.org/wiki/.gg).
> 
> 
>> Dave
> 
> Giampaolo
> 
> 
> 

-- 
View this message in context: 
http://old.nabble.com/uribl-not-working-properly-with-.gg-TLD-tp29159353p29159839.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Reply via email to