Since upgrading to SA 3.2.0 yesterday, I am noticing that the header reporting for URIBLs has changed (I had to rename the original domain names with "1.example.com & 2.example.com" names as my first message to the list was rejected).

With SA 3.1.8:
*  2.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
*      [URIs: 1.example.com.com]
*  2.0 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
*      [URIs: 1.example.com.com 2.example.com.com]
*  2.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
*      [URIs: 2.example.com.com]
*  2.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
*      [URIs: 1.example.com.com 2.example.com.com]
*  2.5 URIBL_BLACK Contains a URL listed in the URIBL blacklist
*      [URIs: 1.example.com.com 2.example.com.com]
*  2.5 URIBL_SBL Contains an URL listed in the SBL blocklist
*      [URIs: 1.example.com.com]

A single output per hit, even if multiple domains were hit.

With SA 3.2.0:
*  2.0 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
*      [URIs: 1.example.com.com]
*  2.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
*      [URIs: 1.example.com.com]
*  2.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
*      [URIs: 2.example.com.com]
*  2.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
*      [URIs: 1.example.com.com]
*  2.5 URIBL_BLACK Contains a URL listed in the URIBL blacklist
*      [URIs: 1.example.com.com]
*  2.5 URIBL_SBL Contains an URL listed in the SBL blocklist
*      [URIs: 1.example.com.com]

Even if multiple domains would have been hit, only the first one is reported.

With SA 3.2.0 and tflags set to "multiple":
*  2.0 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
*      [URIs: 1.example.com.com]
*  2.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
*      [URIs: 1.example.com.com]
*  2.0 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
*      [URIs: 1.example.com.com 2.example.com.com]
*  2.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
*      [URIs: 2.example.com.com]
*  2.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
*      [URIs: 1.example.com.com 2.example.com.com]
*  2.5 URIBL_BLACK Contains a URL listed in the URIBL blacklist
*      [URIs: 1.example.com.com]
*  2.5 URIBL_BLACK Contains a URL listed in the URIBL blacklist
*      [URIs: 1.example.com.com 2.example.com.com]
*  2.5 URIBL_SBL Contains an URL listed in the SBL blocklist
*      [URIs: 1.example.com.com]
*  2.5 URIBL_SBL Contains an URL listed in the SBL blocklist
*      [URIs: 1.example.com.com]

If multiple domains are hit, multiple entries are listed incremented by each new domain found. However, often times it will show the exact same line more that once (note the SBL lines above). Is there a way to get the old header reporting functionality with SA 2.3.0 without using the tflags multiple? I liked getting all domains that were hit by a particular URIBL all displayed in one header output.

Bill

Reply via email to