On 14.09.10 16:46, Glendon Solsberry wrote: > I have messages that are being flagged via URI_HEX, without having > *any* 'http' in them. Any help would be greatly appreciated. > > Full text of the message: ... > Received: from 141641-web1.networldalliance.com (unknown [67.192.58.43]) > by fillmore.networldalliance.com (Postfix) with ESMTP id 2572BFF1D9; > Tue, 14 Sep 2010 14:07:11 +0100 (BST) > Received: by 141641-web1.networldalliance.com (Postfix, from userid 0) > id CB62A1ACCF87; Tue, 14 Sep 2010 13:01:29 +0000 (UTC) > From: r...@141641-web1.networldalliance.com (Cron Daemon) > Subject: [SPAM]Cron <r...@141641-web1> run-parts /etc/cron.hourly > Message-Id: <20100914130129.cb62a1acc...@141641-web1.networldalliance.com> ... > [3405] dbg: rules: ran uri rule URI_HEX ======> got hit: "http://141641";
sa apparently doesn't like your hostname, 141641-web1.networldalliance.com. This hostname appears in many places of the e-mail, including subject. if you could skip the numeric part, it could be better. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 99 percent of lawyers give the rest a bad name.
