https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6335

--- Comment #60 from Mark Martinec <[email protected]> 2010-03-03 23:54:23 
UTC ---
>> Isn's dbl.spamhaus.org supposed to receive a full domain name, and do
>> its own stripping/wildcarding? I could imagine for example that dbl
>> would NOT blacklist osvisnet.co.cc but keep blacklisting co.cc.
>
> Yes. But that would require a *lot* more code and a whole new type,
> if we want to do that for DBL.

How much is 'a *lot* more code'?

> Either way, I don't really see why they would list a 2tld, or a free
> sub-domain hoster, but not some of their hosted stuff.

For precisely the cases like the one I stumbled across. Because some
of their subdomains can be whitehats. The DNS technology covers such
cases just fine (a wildcard, along with more specific exceptions).

> DBL lists $spammer.spaces.live.com, but they won't list spaces.live.com.
> This is the same situation with a different sub-domain hoster.

Let's modify this example a bit: spammer.live.com blacklisted, but
live.com not. And our plugin strips out the first label, querying for
live.com given an URL http://spammer.live.com/, and we miss a hit.

What I'm driving at is - it doesn't take much stretching to come across
cases of FP or FN due to the fact that URIDNSBL plugin can easily
split/strip domain names differently than DBL does.

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to