Hi gyus,

last time I received too many spam with links to sites.google.com
and goo.gl redirects.

The sites.google.com website containg "report" links, however after about a
week of reporting them all, spam containing the same site comes and the site
is not removed.

The goo.gl does not seem to contain any place for reporting spams.
Seems that it was deprecated but still somehow works.


I have decided to locally blacklist them both (I run local rbldns, with IP
and domain-based blacklists).

urirhsbl        L_URIBL_FANTOMAS        rhsbl.fantomas.sk.      TXT
body            L_URIBL_FANTOMAS        eval:check_uridnsbl('URIBL_FANTOMAS')

However, both goo.gl and google.com are skipped with scanning:

/var/lib/spamassassin/3.004004/updates_spamassassin_org/25_uribl.cf:uridnsbl_skip_domain
 go.com google.com googleadservices.com grisoft.com
/var/lib/spamassassin/3.004004/updates_spamassassin_org/25_uribl.cf:uridnsbl_skip_domain
 gappssmtp.com github.com goo.gl google-analytics.com

I can unlist locally both:

clear_uridnsbl_skip_domain      goo.gl  google.com

However, goo.gl seems to be catched:

       *  3.5 L_URIBL_FANTOMAS contains locally blocklisted URI
       *      [URIs: goo.gl]

but sites.google.com is not. Seems SA only calls domain, not subdomains:

Feb 28 12:21:21.173 [8745] dbg: async: calling callback on key 
DNSBL:google.com:rhsbl.fantomas.sk, rule L_URIBL_FANTOMAS
Feb 28 12:21:21.173 [8745] dbg: uridnsbl: complete_dnsbl_lookup 
L_URIBL_FANTOMAS DNSBL:google.com:rhsbl.fantomas.sk

How can I make SA to rbl-check for subdomain, not just google.com domain?

--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
There's a long-standing bug relating to the x86 architecture that
allows you to install Windows.   -- Matthew D. Fuller

Reply via email to