Hi, I have a problem with incorrect URIBL hits on incoming forwarded messages that have been mangled by Lotus Notes.
I have a customer with the domain name "YYYYYimaging.com". (Not really "YYYYY"). "ng.com" is on the URIBL blacklist. I think for awhile it has been removed, but it's there again now. Although my customer does not use Notes, when an outside correspondent does, sometimes the forwarded/replied message comes back containing ascii text like this, complete with the "|, +, -, >" symbols, as follows: |---------+----------------------------> | | "Smith, Fred" | | | <[EMAIL PROTECTED]| | | ng.com> | | | | | | 30/08/2006 09:55 | |---------+----------------------------> This unfortunately matches on "ng.com". In other messages, this mangled forwarded text ends up more like this, with the same problem. Sometimes messages are forwarded from one to another person externally, then eventually back to the original sender, at which point my system treats them as spam. =20 >--------------------------------------------------------------------= ----------------------------------------------------------| =20 | = =20 | =20 | To: "Smith, Fred" <[EMAIL PROTECTED] ng.com>@[EMAIL PROTECTED] | =20 | cc: = =20 | =20 | Subject: Fw: message subject line here but has been removed= selection | =20 >--------------------------------------------------------------------= ----------------------------------------------------------| Does anyone have suggestions other than discontinuing use of the URIBL or using a much lower score? Is there some way to fix this code to make it more resilient to Lotus Notes text mangling? Is there some easy way I can exclude just the one domain name "ng.com" from being looked up at all, but otherwise still use the URIBL? Mark -- Mark G. Thomas ([EMAIL PROTECTED]) voice: 215-591-3695 http://www.misty.com/ http://mail-cleaner.com/
