Weird. Well, I'm pretty sure I'm the only person on this list who uses Razor, so I'm going to guess I must have accidentally razor-report'd a message.It looks like razor has any URLs pointing to bad.dynu.ca listed as spamvertized URLs. And the mailman list is adding that URL in the footer.
I'm sure someone smarter than me has a good reason that that's a good idea. I have a hard time believing that big email providers like Yahoo! and Topica aren't going to be blacklisted real soon...You can tell it's one of the two URLs in the message because the signature matching is e8. e8 is whiplash, which is a hash of a URL, and mostly focuses on the domain of the link.
Yeah, a dummy message with just the bad.dynu.ca URL tests as "known spam". Actually... ah, anything with .dynu.ca tests negative. .dynu.ca is a dynamic hostname service:Since it's the first e8, I assume it's the first URL in the body. Which would be the one to bad.dynu.ca.
http://dmoz.org/Computers/Software/Internet/Servers/Address_Management/Dynamic_DNS_Services/
It didn't. Grrr. I took the footer URLIssue some razor-revokes and it should clear up.
No, it's not a good trend. I'm strongly reminded of overzealous RBLers who blacklist big blocks of IPs to hide one or two bad apples.This is not a good trend for razor. Not good at all. The addition of e8 has boosted razor's hit rate substantially, but it's causing some really odd FPs too.
~Evan
-- Evan Prodromou .O. http://bad.dynu.ca/~evan/ ..O [EMAIL PROTECTED] OOO |