On Thursday, May 5, 2005, 12:10:32 AM, Jeff Chan wrote: > On Wednesday, May 4, 2005, 9:21:11 PM, Craig Baird wrote: >> Today, I've received a number of spams containing a domain that is listed on >> almost all the SURBL lists. I've recieved around 10 of these today, and >> none >> of them have hit on any of the SURBLs despite the domain being listed. Here >> is the message:
[...] >> ----09-5[5]-3237-7[3]-087[3] >> Content-Type: ;text/plain; [...] >> If you'll notice, the content type is shown as ";text/plain;". It seems >> that >> the semicolons are causing Spamassassin not to parse the mail properly. If >> I >> run the message through SA as-is, it hits on no SURBLs. However, if I >> remove >> the semicolons, and run it again, it hits on all the SURBLs. Needless to >> say, >> it would seem some sneaky spammer has found another loophole... >> Craig > SA devs, should this get a bugzilla? > Jeff C. BTW I can duplicate Craig's results. Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
