They certainly would have been trapped in 8.0x 

>From what has been said about complete and incomplete url matches in 8.1x in
this forum, it's doubtful they will now be trapped.

For example, meds.biz in 8.0x would trap mymeds.biz. This is not the case in
8.1x, thus I doubt the fragments would be trapped either.

Because of the change, I have a daily routine set up that copies all the
url-domain-bl.txt to a url-domain.bl.rul, inserting a \ prior to each . As
per rules listing. At that point, all incoming is scanned and then the
fragments would be caught.

The downside is lack of true whitelisting in this process.






-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of FastWave
Sent: Tuesday, May 18, 2004 5:56 PM
To: IMail Forum
Subject: [IMail Forum] URL Fragments in 'url-domain-bl.txt' File


We run 'antispamseeder.exe' daily on messages designated as spam to extract
URLs for the 'url-domain-bl.txt' file. As part of the extraction process,
'antispamseeder.exe' generates non-compliant URL 'fragments' (for lack of a
better word). A sampling of the fragments from our 'url-domain-bl.txt' file
are (there are many, many more):

_fatacmt.yscdpe
_ude.eope
_hdiecyr.rwrxpe
_carenth.'re
_avorik.ofrure
_abel.exclaiming.adulate
_vince.compete
_lfira.nenhte
_kfii.oite'
_nf.bmue
_loope.ulgkewe
_hsabsp.triiwe
_vanrdo.isbuxe
_eddvaio.nize
_ivuheqb.byrze
_what're.org
_they're.org
_com-click.comph
_academia.%ng_url
_theoretic.webm
_leftrightaboutturn..com
_didn't.com
_couldn't.com
_leadbullet..net
_�x�w�Ыκ���.tw
_�x�w�Цa��.tw

NOTE: underscore prefixed to each fragment to prevent them from getting
trapped by the antispam engine.

Since 'antispamseeder.exe' extracted these non-compliant URL 'fragments', we
kept them in the 'url-domain-bl.txt' file thinking that the antispam engine
would still match on them. Does anybody know if that is true? Will they
cause any problems if left in the file? Or, should they be deleted from the
'url-domain-bl.txt' file? How does everyone else handle these 'fragments'?
Just wondering...

Thanks in advance,

Kim
San Diego, CA



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to