[SURBL-Discuss] False Positive on AB_URI_RBL

wolfgang mewolf1 at gmx.net
Fri May 6 20:23:23 CEST 2005


Hi,

ab.surbl.org created a FP here today. The URI in question
www dot teleflora dot com
was in the ad part of a yahoogroups mail, in the part of the message that is 
automatically added by yahoo.

please consider removing the URI to prevent false positives.

regards,

wolfgang

-------------- next part --------------
From sentto-4262012-610-1115380539-xxx=blinde-kuh.de at returns.groups.yahoo.com  Fri May  6 13:59:27 2005
Received: from localhost by hacktor
	with SpamAssassin (2.64 2004-01-11);
	Fri, 06 May 2005 14:01:44 +0200
From: Yahoo!Reminder <reminders at yahoo-inc.com>
To: fruehstueck at yahoogroups.com
Subject: [SPAM] [fruehstueck] Sonntag Brunch?, 5/8/2005, 1:00 pm
Date: 06 May 2005 04:55:36 -0700
Message-Id: <20050506115855.24C1C74B9D at mail.blinde-kuh.de>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.64 on hacktor YES
X-Spam-Status: Yes, hits=5.1 required=5.0 tests=AB_URI_RBL,BAYES_00,
	BK_EMPTY_PORT,HTML_50_60,HTML_FONT_BIG,HTML_MESSAGE,
	TA_urlQuestionmark autolearn=no version=2.64
X-Spam-Level: *****
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_427B5CA8.BCDF6647"
Status: RO
X-Status: 
X-Keywords:                 

This is a multi-part message in MIME format.

------------=_427B5CA8.BCDF6647
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Software zur Erkennung von "Spam" auf dem Rechner "hacktor" hat diese
eingegangene E-mail als mögliche "Spam"-Nachricht identifiziert. Die
ursprüngliche Nachricht wurde an diesen Report angehängt, so dass Sie
sie anschauen können (falls es doch eine legitime E-mail ist).

Zu unrecht als Spam markierte Mails bitte als Attachment
weiterleiten an
maschinenraum at blinde-kuh.de

Vorschau / Content preview:
Reminder from the Calendar of fruehstueck
  http://groups.yahoo.com/group/fruehstueck/cal Sonntag Brunch? Sunday
  May 8, 2005 1:00 pm - 4:00 pm (This event repeats every week.) Event
  Location: insbeth Street: bahrenfelder 176 City, State, Zip: ottensen
  Phone: 390 19 24 [...] 

Content analysis details:   (5.1 points, 5.0 required)

 pts rule name              description
---- ---------------------- -------------------------------------------- ------
 4.0 BK_EMPTY_PORT          BODY: contains URL with :/ in it
 3.0 AB_URI_RBL             BODY: Has URI in AB at http://www.surbl.org/lists.html
                            [www.teleflora.com is blacklisted in URI RBL at]
                            [multi.surbl.org]
 0.1 HTML_FONT_BIG          BODY: HTML has a big font
 0.1 HTML_50_60             BODY: Message is 50% to 60% HTML
 0.0 HTML_MESSAGE           BODY: HTML included in message
-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
                            [score: 0.0000]
 0.5 TA_urlQuestionmark     URI: URL contains ? after /

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_427B5CA8.BCDF6647
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Return-Path: <sentto-4262012-610-1115380539-xxx=blinde-kuh.de at returns.groups.yahoo.com>
X-Original-To: xxx at blinde-kuh.de
Delivered-To: xxx at blinde-kuh.de
Received: from n16a.bulk.scd.yahoo.com (n16a.bulk.scd.yahoo.com [66.94.237.45])
	by mail.blinde-kuh.de (Kinder-Post) with SMTP id 24C1C74B9D
	for <xxx at blinde-kuh.de>; Fri,  6 May 2005 13:58:55 +0200 (CEST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; d=yahoogroups.com; b=X4c5H5gIBsTSqzTu4B3hJDVW2gtYMxst9TybNj8yzE5RGi4VPZ7f1NYpdQ55AgwIXAsDkWQivfWx/4THfwmuAyDEaPHfYuoQgBeKAJxtyU3Pi01zDj6aBgYusIvGrabq;
Received: from [66.218.66.58] by n16.bulk.scd.yahoo.com with NNFMP; 06 May 2005 11:55:42 -0000
Received: from [66.218.66.34] by mailer7.bulk.scd.yahoo.com with NNFMP; 06 May 2005 11:55:39 -0000
X-Yahoo-Newman-Property: groups-email
Received: (qmail 30073 invoked from network); 6 May 2005 11:55:37 -0000
Received: from unknown (66.218.66.218)
  by m28.grp.scd.yahoo.com with QMQP; 6 May 2005 11:55:37 -0000
Received: from unknown (HELO n14.bulk.scd.yahoo.com) (66.218.66.235)
  by mta3.grp.scd.yahoo.com with SMTP; 6 May 2005 11:55:37 -0000
Received: from [66.218.66.59] by n14.bulk.scd.yahoo.com with NNFMP; 06 May 2005 11:55:36 -0000
Received: from [68.142.194.244] by mailer8.bulk.scd.yahoo.com with NNFMP; 06 May 2005 11:55:36 -0000
Received: from [68.142.197.9] by mailer2.bulk.mud.yahoo.com with NNFMP; 06 May 2005 11:55:36 -0000
Received: from [127.0.0.1] by rem102.pim.mud.yahoo.com with NNFMP; 06 May 2005 11:55:36 -0000
x-yahoo-newman-errors: calendar-remind.m5ptimrwgiydcmrngewtcmjrguztqmbygaya-fruehstueck=yahoogroups.com at returns.bulk.yahoo.com
From: Yahoo!Reminder <reminders at yahoo-inc.com>
To: fruehstueck at yahoogroups.com
X-Rem-Ad: 152200140 2701053 308683.6408159.7384640.1414694 LREC 
X-Yahoo-Newman-Id: fruehstueck-1-1115380800
X-eGroups-Application: calendar 
Sender: fruehstueck at yahoogroups.com
MIME-Version: 1.0
Mailing-List: list fruehstueck at yahoogroups.com; contact fruehstueck-owner at yahoogroups.com
Delivered-To: mailing list fruehstueck at yahoogroups.com
List-Id: <fruehstueck.yahoogroups.com>
Precedence: bulk
List-Unsubscribe: <mailto:fruehstueck-unsubscribe at yahoogroups.com>
Date: 06 May 2005 04:55:36 -0700
Subject: [fruehstueck] Sonntag Brunch?, 5/8/2005, 1:00 pm
Reply-To: fruehstueck at yahoogroups.com
Content-Type: multipart/alternative;
 boundary="YCalReminder=hN9Gi187jh6LLJCBZ1115380535"
Message-Id: <20050506115855.24C1C74B9D at mail.blinde-kuh.de>

--YCalReminder=hN9Gi187jh6LLJCBZ1115380535
Content-type: text/plain; charset=us-ascii;

 Reminder from the Calendar of fruehstueck
 http://groups.yahoo.com/group/fruehstueck/cal

Sonntag Brunch?
Sunday May 8, 2005
1:00 pm - 4:00 pm
(This event repeats every week.)
Event Location: insbeth
Street: bahrenfelder 176
City, State, Zip: ottensen
Phone: 390 19 24

Notes:
schon wegen brunch am sonntag entschieden?



Send a Yahoo! Greeting at:
 http://greetings.yahoo.com

Set up birthday reminders!
 http://us.rd.yahoo.com/cal_us/rem/?http://groups.yahoo.com/group/fruehstueck/cal?v=9&evt_type=13

Copyright 2005 Yahoo! Inc. All Rights Reserved.
 http://www.yahoo.com

Privacy Policy:
 http://privacy.yahoo.com/

Terms of Service:
 http://docs.yahoo.com/info/terms/

--YCalReminder=hN9Gi187jh6LLJCBZ1115380535
Content-Type: text/html; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

<html>

<br><br>
<tt>
--<BR>
Wichtiges historisches Dokument,<BR>
nicht als Toilettenpapier benutzen!<BR>
<BR>
diese mailingliste dient der effektiven verabredung<BR>
zum *relaxten* sonntagsbrunch in der ex-webseek-sympathisantInnen-szene.<BR=
>
missbrauch wird verfolgt.<BR>
eltern haften an ihren kindern.<BR>
<BR>
faustregel:<BR>
lade nur leute ein,<BR>
mit denen du gern sonntags fr=FChst=FCcken m=F6chtest.<BR>
<BR>
Zeit: Sonntags 13 Uhr<BR>
Standard-Ort<BR>
mit hervorragendem Fruehstuecksbuffet:<BR>
insbeth, Bahrenfelder Str. 176, 22765 Ottensen<BR>
zwischen Hohenesch und Alma-Wartenberg-Platz<BR>
<a href=3D"http://www.stadtplandienst.de/map.asp?sid=3Dc9123c48d6b4961fe70e=
59795321eb01&plz=3D22765&city=3Dhamburg&str=3DBahrenfelder+Str.+176&start.x=
=3D0&start.y=3D0">http://www.stadtplandienst.de/map.asp?sid=3Dc9123c48d6b49=
61fe70e59795321eb01&amp;plz=3D22765&amp;city=3Dhamburg&amp;str=3DBahrenfeld=
er+Str.+176&amp;start.x=3D0&amp;start.y=3D0</a><BR>
Tel. 040 - 390 19 24<BR>
(tischbestellung ist nur am betreffenden tag sinnvoll)<BR>
<a href=3D"http://www.insbeth.de">http://www.insbeth.de</a><BR>
<BR>
liste abonnieren? leere email an:<BR>
fruehstueck-subscribe at yahoogroups.com<BR>
<BR>
liste abbestellen? leere email an:<BR>
fruehstueck-unsubscribe at yahoogroups.com<BR>
<BR>
</tt>
<br><br>

<br>

<!-- |**|begin egp html banner|**| -->

<table border=3D0 cellspacing=3D0 cellpadding=3D2 width=3D"85%">
<tr bgcolor=3D#FFFFCC valign=3Dmiddle>
<td width=3D167><a href=3D"http://groups.yahoo.com/"><img border=3D0 src=3D=
"http://us.i1.yimg.com/us.yimg.com/i/yg/img/logo/yg2.gif" width=3D"166" hei=
ght=3D"22" alt=3D"Yahoo! Groups"></a></td>
<td width=3D"100%">
<font size=3D"-1">
<a href=3D"http://groups.yahoo.com/mygroups">My Groups</a> |
<a href=3D"http://groups.yahoo.com/group/fruehstueck">fruehstueck Main Page=
</a>
</font>
</td>
</tr>
</table>
<br>

<!-- |**|end egp html banner|**| -->



<center>
<table cellspacing=3D0 cellpadding=3D0 width=3D"75%" border=3D0>
  <tr bgcolor=3D#999999>=20
    <td>=20
      <table cellspacing=3D1 cellpadding=3D0 width=3D"100%" border=3D0>
        <tr>=20
          <td>=20
            <table cellspacing=3D0 cellpadding=3D4 width=3D"100%" border=3D=
0 bgcolor=3D"#cee3f0">
              <tr>=20
                <td valign=3Dmiddle noWrap align=3Dleft width=3D"1%"><img s=
rc=3D"http://us.i1.yimg.com/us.yimg.com/i/cal/bell4.gif" width=3D20 height=
=3D12 border=3D0 alt=3D"Reminder"></td>
                <td noWrap align=3Dleft><font face=3D"Arial,Helvetica"><b> =
Reminder from=20
                  the <a href=3D"http://groups.yahoo.com/group/fruehstueck/=
cal">Calendar of fruehstueck</a></b></font></td>
              </tr>
            </table>
          </td>
        </tr>
        <tr>=20
          <td bgcolor=3Dffffff>=20
            <table cellspacing=3D0 cellpadding=3D8 width=3D"100%" border=3D=
0>
              <tr valign=3Dtop>=20
                <td>=20
                  <table cellspacing=3D0 cellpadding=3D3 width=3D"100%" bor=
der=3D0>
                    <tr>
                      <td colspan=3D2><font face=3D"Arial,Helvetica" size=
=3D+1>
	       		       Sonntag Brunch?
	       		       </font><br><br>
                       <font face=3D"Arial,Helvetica" size=3D-1>
		       <b>Sunday May 8, 2005</b><br>
                       <b>1:00 pm
	       		       - 4:00 pm
	       		       </b><br>
	       		       This event repeats every week.
	       	       		       </font><br>
	                             <font face=3D"Arial" size=3D-1>
	       		       <b>Event Location</b>: insbeth
	       	                              <br><b>Street</b>: bahrenfelder 176
	       	                              <br><b>City, State, Zip</b>: ottense=
n
		       	       	                              <br><b>Phone</b>: 390 19 24
	       		       </font><br>
	      	       		       <font face=3D"Arial,Helvetica" size=3D-1><b>Notes:<=
/b><br>
		       schon wegen brunch am sonntag entschieden?<br></font>
	       		      </td>

                    </tr>
                    <tr>=20
                      <td align=3D"left" colspan=3D2>=20
                        <hr size=3D"1" width=3D"100%">
                        <table width=3D"100%" border=3D"0" cellspacing=3D"1=
" cellpadding=3D"4" bgcolor=3D"ffffff">
                          <tr>
			    <td align=3Dright><a href=3D"http://greetings.yahoo.com"><img src =
=3D"http://us.i1.yimg.com/us.yimg.com/i/greet/icon.gif" border=3D0 hspace=
=3D2></a></td>
                            <td width=3D"50%"><font face=3D"Arial" size=3D"=
-1"><b><a href=3D"http://greetings.yahoo.com">
			    Yahoo! Greetings</a></b><br>
                            Send a Yahoo!  Greeting.</font>
			    </td>
					    <td align=3Dright><a href=3D"http://us.rd.yahoo.com/cal_us/rem/?ht=
tp://groups.yahoo.com/group/fruehstueck/cal?v=3D9&evt_type=3D13"><img src=
=3D"http://us.i1.yimg.com/us.yimg.com/i/my/bdaycake.gif" border=3D0 hspace=
=3D2></a></td>
                            <td width=3D"50%"><b><a href=3D"http://us.rd.ya=
hoo.com/cal_us/rem/?http://groups.yahoo.com/group/fruehstueck/cal?v=3D9&evt=
_type=3D13">
			    <font face=3D"Arial" size=3D"-1">Birthday Reminders</font></a></b><b=
r>
                            Set up birthday reminders!</font></td>
		                         </tr>
                        </table>
                      </td>
                    </tr>
                  </table>
                </td>
	                <td valign=3Dtop width=3D300 colspan=3D2><table border=3D"=
0" cellpadding=3D"0" cellspacing=3D"0"><tr><td align=3D"center"><font face=
=3D"arial" size=3D"-2">ADVERTISEMENT</font><br>=0D<script language=3D"JavaS=
cript">=0Dvar lrec_target=3D"_top";var lrec_URL=3Dnew Array();=0Dlrec_URL[1=
]=3D"http://us.ard.yahoo.com/SIG=3D12i4pjavm/M=3D308683.6408159.7384640.141=
4694/D=3Dcalrem/S=3D152200140:LREC/Y=3DYAHOO/EXP=3D1115387735/A=3D2701053/R=
=3D0/id=3Dflashurl/SIG=3D12d2dtjfb/*http://www.teleflora.com/feature.asp?sr=
ccode=3DYahooLREC_ASAP5&promotion=3DMD5D";=0Dvar lrec_flashfile=3D"http://u=
s.a1.yimg.com/us.yimg.com/a/te/teleflora/042905_tf_asap300x250.swf?clickTAG=
=3Djavascript:LRECopenWindow(1)";=0Dvar lrec_altURL=3D"http://us.ard.yahoo.=
com/SIG=3D12i4pjavm/M=3D308683.6408159.7384640.1414694/D=3Dcalrem/S=3D15220=
0140:LREC/Y=3DYAHOO/EXP=3D1115387735/A=3D2701053/R=3D1/id=3Daltimgurl/SIG=
=3D12d2dtjfb/*http://www.teleflora.com/feature.asp?srccode=3DYahooLREC_ASAP=
5&promotion=3DMD5D";=0Dvar lrec_altimg=3D"http://us.a1.yimg.com/us.yimg.com=
/a/te/teleflora/042905_tf_asap300x250.gif";=0Dvar lrec_width=3D300;var lrec=
_height=3D250;</script>=0D<script language=3D"JavaScript" src=3D"http://us.=
a1.yimg.com/us.yimg.com/a/1-/jscodes/flash7/ct_lrec_040901.js"></script>=0D=
<noscript><a href=3D"http://us.ard.yahoo.com/SIG=3D12i4pjavm/M=3D308683.640=
8159.7384640.1414694/D=3Dcalrem/S=3D152200140:LREC/Y=3DYAHOO/EXP=3D11153877=
35/A=3D2701053/R=3D2/id=3Dnoscript/SIG=3D12d2dtjfb/*http://www.teleflora.co=
m/feature.asp?srccode=3DYahooLREC_ASAP5&promotion=3DMD5D" target=3D"_top"><=
img src=3D"http://us.a1.yimg.com/us.yimg.com/a/te/teleflora/042905_tf_asap3=
00x250.gif" width=3D"300" height=3D"250" border=3D"0"></a></noscript>=0D</t=
d></tr></table></td>
	              </tr>
            </table>
          </td>
        </tr>
      </table>
    </td>
  </tr>
  <tr>
    <td align=3Dcenter>
<p>
<hr size=3D1 width=3D"100%" noshade>
<font SIZE=3D-1><i>Copyright &copy;&nbsp;
2005=20
&nbsp;<a target=3D_blank href=3D"http://www.yahoo.com">Yahoo! Inc.</a>&nbsp=
;All Rights Reserved.</i><br>
<a target=3D_blank href=3D"http://privacy.yahoo.com/">Privacy Policy</a> - =
<a target=3D_blank href=3D"http://docs.yahoo.com/info/terms/">Terms of Serv=
ice</a></font>
    </td>
  </tr>
</table>
<img alt=3D"" width=3D"1" height=3D"1" src=3D"http://us.adserver.yahoo.com/=
l?M=3D308683.6408159.7384640.1414694/D=3Dcal/S=3D152200140:LREC/A=3D2701053=
/rand=3DhN9Gi187jh6LLJCBZ1115380535">
</center>
<html>


<!-- |**|begin egp html banner|**| -->

<br>
<tt><hr width=3D"500">
<b>Yahoo! Groups Links</b><br>
<ul>
<li>To visit your group on the web, go to:<br><a href=3D"http://groups.yaho=
o.com/group/fruehstueck/">http://groups.yahoo.com/group/fruehstueck/</a><br=
>&nbsp;
<li>To unsubscribe from this group, send an email to:<br><a href=3D"mailto:=
fruehstueck-unsubscribe at yahoogroups.com?subject=3DUnsubscribe">fruehstueck-=
unsubscribe at yahoogroups.com</a><br>&nbsp;
<li>Your use of Yahoo! Groups is subject to the <a href=3D"http://docs.yaho=
o.com/info/terms/">Yahoo! Terms of Service</a>.
</ul>
</tt>
</br>

<!-- |**|end egp html banner|**| -->


</body></html>

--YCalReminder=hN9Gi187jh6LLJCBZ1115380535--



------------=_427B5CA8.BCDF6647--



More information about the Discuss mailing list