On Thu, 2005-03-02 at 17:53 -0500, Matt Kettler wrote:
It looks like razor has any URLs pointing to bad.dynu.ca listed as 
spamvertized URLs. And the mailman list is adding that URL in the footer.
Weird. Well, I'm pretty sure I'm the only person on this list who uses Razor, so I'm going to guess I must have accidentally razor-report'd a message.
You can tell it's one of the two URLs in the message because the signature 
matching is e8. e8 is whiplash, which is a hash of a URL, and mostly 
focuses on the domain of the link.
I'm sure someone smarter than me has a good reason that that's a good idea. I have a hard time believing that big email providers like Yahoo! and Topica aren't going to be blacklisted real soon...
Since it's the first e8, I assume it's the first URL in the body. Which 
would be the one to bad.dynu.ca.
Yeah, a dummy message with just the bad.dynu.ca URL tests as "known spam". Actually... ah, anything with .dynu.ca tests negative. .dynu.ca is a dynamic hostname service:

http://dmoz.org/Computers/Software/Internet/Servers/Address_Management/Dynamic_DNS_Services/

Issue some razor-revokes and it should clear up.
It didn't. Grrr. I took the footer URL
This is not a good trend for razor. Not good at all. The addition of e8 has 
boosted razor's hit rate substantially, but it's causing some really odd 
FPs too.
No, it's not a good trend. I'm strongly reminded of overzealous RBLers who blacklist big blocks of IPs to hide one or two bad apples.

~Evan

-- 
Evan Prodromou                  .O.
http://bad.dynu.ca/~evan/       ..O
[EMAIL PROTECTED]                OOO

Reply via email to