Looking at the senderbase cache I found entries like

12.10.219.431240239639 2 US|AMERICAN
12.10.219.441240240231 2 US|AMERICAN
12.10.219.611240232500 2 US|AMERICAN

now; if you query the above IPs against senderbase
you'll obtain

0=1|1=AMERICAN
EXPRESS|2=4.6|3=4.9|4=5062|6=1089301675|8=265871|9=19|20=lppiu550
.|21=aexp.com|22=Y|23=4.9|24=5.2|25=1049184000|40=3.7|41=4.0|43=4.5|44=0
.04|45=N
|46=24|48=24|49=1.00|50=Phoenix|51=AZ|52=85027|53=US|54=-112.089|55=33.7
248

so it sounds like ASSP is truncating the orgname at the first
space char it meets; this isn't a good idea at all since it may
(and probably will) allow "spoofing" and also since it would
cause problems with the "" the only way to use the senderbase
org is to cache the full orgname including spaces and other
chars; also, the cache looks somewhat strange, for example
there are entries like

124.83.200.491239388228 0 JP|Internet Content Provider|yahoo.co.jp
124.83.200.571239631190 0 JP|Internet Content Provider|yahoo.co.jp
124.83.200.681239311402 0 JP|Internet Content Provider|yahoo.co.jp
124.83.200.701240072565 3 JP|Internet_Content_Provider|yahoo.co.jp
124.83.212.231240215367 3 JP|Internet_Content_Provider|yahoo.co.jp
124.83.212.251239868738 3 JP|Internet_Content_Provider|yahoo.co.jp
124.83.212.871240238692 3 JP|Internet_Content_Provider|yahoo.co.jp
124.83.212.911239892751 3 JP|Internet_Content_Provider|yahoo.co.jp

which are using two different format, one of which includes spaces
at this point I think there's something strange inside the code which
handles the senderbase entries and cache






------------------------------------------------------------------------------
Stay on top of everything new and different, both inside and 
around Java (TM) technology - register by April 22, and save
$200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
300 plus technical and hands-on sessions. Register today. 
Use priority code J9JMT32. http://p.sf.net/sfu/p
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to