From ekolve@comcast.net Sat May 15 01:58:36 2004 From: Eric Kolve To: discuss@lists.surbl.org Subject: Re: [SURBL-Discuss] Domain not identified by SpamCopURI Date: Fri, 14 May 2004 16:57:51 -0700 Message-ID: <20040514235751.GA13467@requiem> In-Reply-To: <0d2d01c439e2$b6cac270$2001a8c0@michaweb.net> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4642498413548561934==" --===============4642498413548561934== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit I have this fixed now in my subversion tree. I will release 0.16 sometime tonight to fix this. This basically affects all hosts that have a number greater 9 in the last octet. Sorry about this. --eric On Fri, May 14, 2004 at 08:38:40PM +0200, John Fawcett wrote: > I just got the following in a spam message which was > not identified by spamcopuri even though the numeric > domain it is in sc.surbl.org > > > > The debug output shows that the uri is found > by the SA modules but that SpamCopURI > queries for the wrong hostname. > > It should be querying 232.161.63.69.sc.surbl.org > > > debug: uri tests: Done uriRE > > debug: checking url: http://69.63.161.232/?rid%1528 > > debug: querying for 63.161..sc.surbl.org > > debug: Query failed for 63.161..sc.surbl.org > > It looks like there are two problem is in SpamCopURI > (v 0.15) in the routine _spamcop_uri > > (1) > # strip any non alpha characters off of the end > # this is to fix a bug where url parsing in core SA > # leaves parens and other junk on the URL that URI > # parses to the host > > This causes the domain to become 69.63.161. > (including a trailing dot) > > (2) The domain is stripped back to a two level domain > even though it is/should be an ip address. > It becomes 63.161. (including a trailing dot) > > This domain then does not match an ip address format > so it is not reversed and the lookup is done for > 63.161. added on to .sc.surbl.org, i.e.: > > 63.161..sc.surbl.org > > Eric, can you help? > > John > _______________________________________________ > Discuss mailing list > Discuss(a)lists.surbl.org > http://lists.surbl.org/mailman/listinfo/discuss --===============4642498413548561934==--