On 5/11/2015 9:13 AM, Reindl Harald wrote:
i face false positives where the links are just "facebook.com" with the http-prefix in front and NOT "com" between the http-prefix and the real facebook domain

the domain with "com" in front is indeed on both URIBL but it just don#t exist in the messages at all - why does SA extract the domains wrong from the mailsource when there is no "comfacebook" at all besides the SA report?

URIBL_DBL_SPAM Contains a spam URL
[URIs: com__facebook.com]

URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: com__facebook.com]

Don't know. Are you using 3.4.1? Can you provide a spample that reproduces the issue?

regards,
KAM

Reply via email to