I see no reason to send them to you privately as 4 times in the past you
make same request as if you are going to do something privately and then
nothing is never heard back from you while everyone assumes you did
something....so here it is for the list:
Here is one from travel-medications.com that is always missed by the
url-blacklist, but always detected every day with antispamseeder. My
assumption is that since it is an image source and not href, it is not
detected by the black list. HOWEVER, ANTISPAMSEEDER DOES CAPTURE IT
EVERYDAY. Thus the 2 are not working together in the proper way. There is NO
REASON for antispamseeder to capture it if the urlblacklist is not going to
also check for image sources.
>From <[EMAIL PROTECTED]> Sun May 02 17:20:14 2004
Received: from 3E6B166F.rev.stofanet.dk [62.107.22.111] by domain.tld
(SMTPD32-8.10) id A5FA3A02F0; Sun, 02 May 2004 17:19:54 -0400
Message-ID: <[EMAIL PROTECTED]>
From: "Tameka Chung" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: SPAM PHRASE SPAM DNSBL Save upto 70% off on Soma (and hundreds of
other drugs)
Date: Sun, 02 May 2004 15:18:56 -0700
X-Mailer: necromancer retiree
capita-codeposit: sorority regimentation partake
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--6397421727813799"
X-IMAIL-SPAM-DNSBL: (SpamCop,65f9003a02f09621,127.0.0.2)
X-IMAIL-SPAM-PHRASE: (65f9003a02f09621, soma)
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 383484029
----6397421727813799
Content-Type: text/plain;
<!--
adventitious
conifer heighten watch gauge adjudge centennial downs proceed imponderable
chordata hendrick crowd deceitful craw prosecution meliorate residential wax
!-->
----6397421727813799
Content-Type: text/html;
Content-Transfer-Encoding: QUOTED-PRINTABLE
<html>
<head>
<title>san parcel certify coauthor denotative assassinate tombstone beryl =
abominable slavish chateaux administrable dogwood burt cromwellian ruminat=
e pecos kovacs asher debugger ciceronian vagina blameworthy simpleminded a=
lcove arianism=20 canadian</title>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859=
-1">
</head>
<body link=3D"#990000" alink=3D"#990000" vlink=3D"#990000" marginwidth=3D"=
0" marginheight=3D"0">
<table cellspacing=3D0 width=3D"657" border=3D"1" align=3D"center" borderc=
olorlight=3D"#000000" bordercolordark=3D"#000000">
<tr bgcolor=3D"#CCCCCC">
<td width=3D"157" rowspan=3D"4" bordercolor=3D"#000000" bgcolor=3D"#FF=
FFFF"><div align=3D"center">
<img src=3D"http://euridyce.a6.win398meds.biz/pills/pres-dctr.jpg";></div><=
/td>
<td width=3D"125" valign=3D"middle"><a href=3D"http://www.subject.net"=
></a> <div align=3D"center"><strong><font face=3D"Verdana, Arial, Helvetic=
a, sans-serif">Prozac</font> </strong></div></td>
<td width=3D"125" valign=3D"middle"><a href=3D"http://www.coop.org";></=
a> <div align=3D"center"><strong> <font face=3D"Verdana, Arial, Helve=
tica, sans-serif">V<font style=3D"FONT-SIZE: 13px">l</font>agra</font></st=
rong></div></td>
<td width=3D"125" valign=3D"middle"><a href=3D"http://www.effloresce.o=
rg"></a> <div align=3D"center"><strong> <font face=3D"Verdana, Arial,=
Helvetica, sans-serif">Phe<a href=3D"http://www.metcalf.com";></a>nterm<fo=
nt style=3D"FONT-SIZE: 13px">l</font>ne</font></strong></div></td>
<td width=3D"125" valign=3D"middle"><a href=3D"http://www.dissociate.n=
et"></a> <div align=3D"center"><strong> <font face=3D"Verdana, Arial,=
Helvetica, sans-serif">So<a href=3D"http://www.freshen.net";></a>ma</font>=
</strong></div></td>
</tr>
<tr bgcolor=3D"#FFFFFF">
<td><a href=3D"http://www.heterosexual.org";></a> <div align=3D"center"=
><img src=3D"http://travel-medications.com/prozac.gif";></div></td>
<td><a href=3D"http://www.expenditure.com";></a> <div align=3D"center">=
<img src=3D"http://bingle.a6.win398meds.biz/pills/pns-vg.gif";></div></td>
<td><a href=3D"http://www.slumber.org";></a> <div align=3D"center"><img=
src=3D"http://travel-medications.com/phentermine.gif";></div></td>
<td><a href=3D"http://www.lummox.com";></a> <div align=3D"center"><img =
src=3D"http://travel-medications.com/soma.gif";></div></td>
</tr>
<tr bgcolor=3D"#CCCCCC">
<td width=3D"125" valign=3D"middle"><a href=3D"http://www.abrupt.net";>=
</a> <div align=3D"center"><strong><font face=3D"Verdana, Arial, Helvetica=
, sans-serif"> Amb<font style=3D"FONT-SIZE: 13px">l</font>en</font></=
strong></div></td>
<td width=3D"125" valign=3D"middle"><a href=3D"http://www.soccer.com";>=
</a> <div align=3D"center"><strong><font face=3D"Verdana, Arial, Helvetica=
, sans-serif">Val<font style=3D"FONT-SIZE: 13px">l</font>um</font> </=
strong></div></td>
<td width=3D"125" valign=3D"middle"><a href=3D"http://www.inasmuch.net=
"></a> <div align=3D"center"><strong> <font face=3D"Verdana, Arial, H=
elvetica, sans-serif">C<font style=3D"FONT-SIZE: 13px">l</font>alis</font>=
</strong></div></td>
<td width=3D"125" valign=3D"middle"><a href=3D"http://www.label.com";><=
/a> <div align=3D"center"><strong> <font face=3D"Verdana, Arial, Helv=
etica, sans-serif">Xa<a href=3D"http://www.able.net";></a>nax</font></stron=
g></div></td>
</tr>
<tr bgcolor=3D"#FFFFFF">
<td><a href=3D"http://www.armoire.org";></a> <div align=3D"center"><img=
src=3D"http://travel-medications.com/ambien.gif";></div></td>
<td><a href=3D"http://www.sheppard.net";></a> <div align=3D"center"><im=
g src=3D"http://travel-medications.com/valium.gif";></div></td>
<td><a href=3D"http://www.ridicule.org";></a> <div align=3D"center"><im=
g src=3D"http://valley.a6.win398meds.biz/pills/pr-cls.jpg";></div></td>
<td><a href=3D"http://www.fleawort.com";></a> <div align=3D"center"><im=
g src=3D"http://travel-medications.com/xanax.gif";></div></td>
</tr>
<tr bordercolor=3D"#000000">
<td height=3D"10" colspan=3D"5"></td>
</tr>
<tr bgcolor=3D"#0066FF">
<td width=3D"407" colspan=3D"3" rowspan=3D"6" bordercolor=3D"#000000" =
bgcolor=3D"#0066FF">
<div align=3D"center"> <font face=3D"Verdana, Arial, Helvetica, sans=
-serif" color=3D"#FFFFFF" style=3D"FONT-SIZE: 24px">Get
ov<a href=3D"http://www.gauntlet.com";></a>er 300 medicat<b><font s=
ize=3D3">l</font></b>ons
online sh<b><font size=3D3">l</font></b>pp<a href=3D"http://www.al=
lusion.com"></a>ed over<a href=3D"http://www.beak.com";></a>nig<a href=3D"h=
ttp://www.brown.org"></a>ht
to your fr<a href=3D"http://www.swanky.com";></a>ont do<a href=3D"h=
ttp://www.lykes.org"></a>or with
no pr<a href=3D"http://www.chorale.net";></a>escr<b><font size=3D3"=
>l</font></b>ption.</font></font></div></td>
<td width=3D"250" colspan=3D"2" align=3D"center" valign=3D"middle" bor=
dercolor=3D"#0066FF">
<div align=3D"left"><font color=3D"#00FFFF" size=3D"3" face=3D"Verda=
na, Arial, Helvetica, sans-serif"><strong> *</strong>&nbs=
p; No
Prescr<font size=3D"2">l</font>pt<font size=3D"2">l</font>on =
Needed</font></div></td>
</tr>
<tr>
<td colspan=3D"2" align=3D"center" valign=3D"middle" bordercolor=3D"#0=
066FF" bgcolor=3D"#0066FF">
<div align=3D"left"><font color=3D"#00FFFF" size=3D"3" face=3D"Verda=
na, Arial, Helvetica, sans-serif"><strong> *</strong>&nbs=
p; Fully
Conf<font size=3D2">l</font>dential</font></div></td>
</tr>
<tr>
<td colspan=3D"2" align=3D"center" valign=3D"middle" bordercolor=3D"#0=
066FF" bgcolor=3D"#0066FF">
<div align=3D"left"><font color=3D"#00FFFF" size=3D"3" face=3D"Verda=
na, Arial, Helvetica, sans-serif"><strong> *</strong>&nbs=
p; No
Embarrassment</font></div>
<div align=3D"left"></div></td>
</tr>
<tr>
<td colspan=3D"2" align=3D"center" valign=3D"middle" bordercolor=3D"#0=
066FF" bgcolor=3D"#0066FF">
<div align=3D"left"><font color=3D"#00FFFF" size=3D"3" face=3D"Verda=
na, Arial, Helvetica, sans-serif"><strong> *</strong>&nbs=
p; No
Waiting Rooms</font></div></td>
</tr>
<tr>
<td colspan=3D"2" align=3D"center" valign=3D"middle" bordercolor=3D"#0=
066FF" bgcolor=3D"#0066FF">
<div align=3D"left"><font color=3D"#00FFFF" size=3D"3" face=3D"Verda=
na, Arial, Helvetica, sans-serif"><strong> *</strong>&nbs=
p; Sh<font style=3D"FONT-SIZE: 13px">l</font>pped
Overn<font style=3D"FONT-SIZE: 13px">l</font>ght</font></div></td>=
</tr>
<tr>
<td colspan=3D"2" align=3D"center" valign=3D"middle" bordercolor=3D"#0=
066FF" bgcolor=3D"#0066FF">
<div align=3D"left"><font color=3D"#00FFFF" size=3D"3" face=3D"Verda=
na, Arial, Helvetica, sans-serif"><strong> *</strong>&nbs=
p; D<font style=3D"FONT-SIZE: 13px">l</font>screet
Packaging</font></div></td>
</tr>
<tr bordercolor=3D"#FFFFFF" bgcolor=3D"#FFFFFF">
<td colspan=3D"5" height=3D"10"></td>
</tr>
<tr bordercolor=3D"#000000" bgcolor=3D"#CCCCCC">
<td height=3D"40" colspan=3D"5"><div align=3D"center"><font color=3D"#=
000000" face=3D"Verdana, Arial, Helvetica, sans-serif"><a href=3D"http://w=
in398meds.biz/b94"><strong>Click
Here For Information</strong></a></font></div></td>
</tr>
</table>
<p> </p>
<p> </p>
<p align=3D"center"><font size=3D"1" face=3D"Verdana, Arial, Helvetica, sa=
ns-serif">If
y<a href=3D"http://www.clue.org";></a>ou wi<a href=3D"http://www.dementia=
com"></a>sh for em<a href=3D"http://www.nucleate.net";></a>ail
el<a href=3D"http://www.cider.org";></a>imin<a href=3D"http://www.thalliu=
m.net"></a>atio<a href=3D"http://www.alcoa.com";></a>n,
you can do so
<a href=3D"http://bluish.win398meds.biz/unsubscribe.ddd";>here.</a></font><=
/p>
<p> </p>
<br>
<p> </p>
<br>
<p> </p>
<p> </p>
shifty pull zesty appropriable watt clio leghorn protease germanic cardiol=
ogy shaky coffee taffeta coalescent azimuthal deputy infrastructure leech =
myoglobin resuscitate stringy balcony procedure flyer curbside codeposit s=
agacity exuberant zap olfactory cadaver mushy pavlov cheery exuberant tran=
sfix validate sophia=20 reich luxuriate geology dewdrop
shakedown noetherian onlooker playtime mandarin countersink emphysematous =
diploidy sixfold bedim workmen cousin roger implicate cattail divisible po=
rcelain attain water datsun stephanie filmdom perceptive spiral afield dod=
ecahedral kuhn necromantic isaacson saturday corralled thrown congress lea=
dsmen=20 dog amber vile wolf chive mph infest hysterectomy poop dorothea h=
azelnut bandage doubloon ravine dauphin coleridge irretrievable put celia =
lockheed=20 brainy clout frock
gratis divergent progress characteristic heavenward swedish brainard coars=
en aviary adenine depressant shoe nobleman deputy choke wood=20 bemoan ho =
blush bolivia buoy
ray emancipate kraut devolution dulcet astride band comfort clank daybreak=
inform brinkmanship sybarite dramaturgy infant attainder bitterroot=20 ca=
nister bellflower
</body>
</html>
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tripp Allen
Sent: Friday, April 30, 2004 9:38 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] URL Blacklists
If you have easy-doctor-consultation.com in your black list, then
a.b.c.easy-doctor-consultation.com should be caught as long as it's a URL in
an HTML email. Can you send me off list the actual emails that get through,
including headers in a zip format?
Tripp
----- Original Message -----
From: "RMilner" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, April 30, 2004 9:14 AM
Subject: RE: [IMail Forum] URL Blacklists
The always have something prior to the domain.tld.....ie
vulcanization.easy-doctor-consultation.com and I reduce that to
easy-doctor-consultation.com as they always change the first word in every
email and send out several waves a day. None of them every get blacklisted
and sent to spam land - but as they have meds they usually trip a spam
phrase with less severe inspection penalties - but it's a waste of time to
deal with them everyday as I am doing what needs to be done everyday to
prevent them after the first occurrence.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tripp Allen
Sent: Friday, April 30, 2004 8:04 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] URL Blacklists
What version are you running? Do you have multiple domains configured
against one domain black list? Are the URLs it's missing in plain text? I
just tried it here with a couple of your examples and they were all caught
(8.1).
04:30 07:58 SMTP(3f56009001462c39) matched URL Domain [cheap-drugs-here.biz]
04:30 08:02 SMTP(4044009201462c3d) matched URL Domain
[www.travel-medications.com] Tripp
----- Original Message -----
From: "RMilner" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, April 30, 2004 7:32 AM
Subject: [IMail Forum] URL Blacklists
> Have certain spammers such as easy-doctor-consultation.com and
> cheap-drugs-here.biz, cheap-drugs-here.biz com-yahoo.com.ph,
> travel-medications.com, online-auction-university.com and
orders-galore.biz
> paid IPSWITCH to hard code their addresses as whitelisted?
>
> Or is it that IMAIL's URL Domain Blacklist just doesn't work with domain's
> that have a dash in their domain.tld?
>
> And before someone hops in about \-, that isn't the case in the url domain
> blacklist .txt file.
>
> HREF catches and puts them in the urldomain blacklist everytime you run
> spamseeder, but it never tags these spots no matter how many times they
are
> in your list.
>
>
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
![http://euridyce.a6.win398meds.biz/pills/pres-dctr.jpg"](http://euridyce.a6.win398meds.biz/pills/pres-dctr.jpg"){kind=link}
![http://travel-medications.com/prozac.gif"](http://travel-medications.com/prozac.gif"){kind=link}
![http://bingle.a6.win398meds.biz/pills/pns-vg.gif"](http://bingle.a6.win398meds.biz/pills/pns-vg.gif"){kind=link}
![http://travel-medications.com/phentermine.gif"](http://travel-medications.com/phentermine.gif"){kind=link}
![http://travel-medications.com/soma.gif"](http://travel-medications.com/soma.gif"){kind=link}
![http://travel-medications.com/ambien.gif"](http://travel-medications.com/ambien.gif"){kind=link}
![http://travel-medications.com/valium.gif"](http://travel-medications.com/valium.gif"){kind=link}
![http://valley.a6.win398meds.biz/pills/pr-cls.jpg"](http://valley.a6.win398meds.biz/pills/pr-cls.jpg"){kind=link}
![http://travel-medications.com/xanax.gif"](http://travel-medications.com/xanax.gif"){kind=link}