I've posted a short pharma spam message to:

http://www.inetmsg.com/spam.txt

and debug output to:

http://www.inetmsg.com/sa-debug.txt

It displays a single URI linked line in an e-mail client that only
displays: "Please visit our shop."  There seems to be something about
the URI in the message that allows it to bypass all URIBL testing by
SpamAssassin.

The domain is listed in the following URIBLs:

URIBL_JP_SURBL
URIBL_OB_SURBL

dig canadiansitetable.com.multi.surbl.org +short
127.0.0.80

and URIBL_BLACK

dig canadiansitetable.com.multi.uribl.com +short
127.0.0.2

Yet there were no URIBL hits.  The message scored high and was tagged as
spam, but I'm just curious as to what it is about this message that
allowed it to bypass all SA URIBL tests?

I'm running spamassassin -V
SpamAssassin version 3.2.5
running on Perl version 5.8.8

And in case you're wondering, I'm not using the shortcircuit plugin.

Bill

Reply via email to