Ok. Well, as noted before, the warning was added around 3.3.2 and is on purpose. Have you contacted the author of the 3rd party plugin to discuss the issue? Regards, KAM
On June 5, 2015 7:13:37 PM EDT, Larry Rosenman <l...@lerctr.org> wrote: >On 2015-06-05 18:04, RW wrote: >> On Fri, 05 Jun 2015 18:11:48 -0400 >> Bill Cole wrote: >> >>> On 5 Jun 2015, at 17:53, Larry Rosenman wrote: >>> >>> > I guess my question is why is it being called during sa-learn. >>> >>> You have yet to demonstrate that to be occurring. >>> >>> SA has a misfeature of attempting to de-obfuscate obfuscated URIs >and >>> trusting the results of its inherently imperfect de-obfuscation to >>> provide putative domain names, which it may do various sorts of >>> resolution on. So if you have a message that contains a line like: >>> >>> To look up a domain at EnemiesList, prepend it to the DNS >domain: >>> .sa.enemieslist.com >>> >>> then SA may pick up '.sa.enemieslist.com' as a domain name to be >>> examined. >>> >> >> That's unlikely since (if I'm reading it correctly) the error lines >are >> only seen when sa-learn is training on spam. >Bingo -- the output I sent was from SA-LEARN. > >If I disable the plugin, the issue goes away. > > >-- >Larry Rosenman http://www.lerctr.org/~ler >Phone: +1 214-642-9640 E-Mail: l...@lerctr.org >US Mail: 108 Turvey Cove, Hutto, TX 78634-5688
