-----Original Message----- From: Jeff Chan [mailto:jeffc@surbl.org] Sent: Wednesday, May 05, 2004 8:26 AM To: spamassassin-users@incubator.apache.org Cc: SURBL Discuss Subject: Re: Bug in Spamcop's surbl add-on module

On Wednesday, May 5, 2004, 5:18:04 AM, Keith Hackworth wrote:

...

I was installing a new mail server and testing the surbl lookups, but my test kept getting through not being marked as spam. The test I was using was http://e.1asphost.com - this is on the be.surbl.org list. ... My logs show that the system is looking up 1asphost.com, which is NOT on the list.

For some

...

reason, it stripped off the "e."

...

It seems that spamcop's surbl doesn't handle subdomains at

all. Anyone

...

else seeing this?

Hmm, it is indeed in BigEvil with the e. :

bigevil.cf:uri BigEvilList_181 /\b(?:extreme-rapes.com|excaliburproducts.c om|evansezmoney.estarnetwork.com|enjoyadvanced097.org|emedor ders.com|email. homemadesimple.com|ehostzzz.net|e-g.com|efreedomweb.net|ecr edibledeals.com| echofrompeople.com|e.1asphost.com)\b/i

and it's therefore making it into be.surbl.org with the e. :

bigevil.domains:e.1asphost.com

However we should be taking off the subdomain before it goes into the SURBL form. I'll need to check with Chris on how we can handle that.

BTW, SURBL is not a SpamCop project, although we are using SpamCop URI domains as a data source in the sc.surbl.org list.

Jeff C.

It's not a bug, its a feature! Actually, no its a bug :) I have been going thru cleaning these sort of things up. However I started at the begining of the B.E. list. This is at rule 181, I haven't even got to 100 yet! This is left over from my alpha phase of B.E. I've had a lot more coffee since then.

So I will fix that one, But I'm sure there are others ;)

--Chris