[SURBL-Discuss] Pls check: paypal

William Stearns wstearns at pobox.com
Fri Sep 17 18:28:49 CEST 2004


Good evening, Alex,

On Fri, 17 Sep 2004, Alex Broens wrote:

> Just scored this a while ago.
> 
> 	*  3.0 WS_URI_RBL URI's domain appears in ws database at ws.surbl.org
> 	*      [www.paypal.com	[in URI RBL at multi.surbl.org]
> 
> In the original msg there's a a weird charachter after the .com which I 
> cannot explain.
> 
> maybe a space?
> 
> could you pls check where this may be showing up (no in my local zone :)

	I've checked the raw files uploaded and I can't see anything like 
a ^A in any of them.  Is there a chance that this is spamassassin 
reporting that _your message_ had www.paypal.com{ctrl-A} in it, and this 
matched...  Hmm.  That doesn't make sense either as "paypal.com" isn't in 
the blacklist.
	/me puzzles...
	Cheers,
	- Bill

---------------------------------------------------------------------------
	"Whip me, beat me, make me use ipchains."
	- Paul "Rusty" Russell
--------------------------------------------------------------------------
William Stearns (wstearns at pobox.com).  Mason, Buildkernel, freedups, p0f,
rsync-backup, ssh-keyinstall, dns-check, more at:   http://www.stearns.org
--------------------------------------------------------------------------


More information about the Discuss mailing list