spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Martin Gregorie <>
Subject Re: URI_HEX fp
Date Tue, 13 Nov 2018 02:34:11 GMT
On Mon, 2018-11-12 at 20:20 -0500, Alex wrote:
> Hi, this doesn't look like it should be considered a hex URI.
> Nov 12 20:14:16.376 [15295] dbg: rules: ran uri rule URI_HEX ======>
> got hit: "https://api-89c8e17d"
I didn't get any joy from playing with this one. By assuming that it
89c9e17d is a set of four x two 2 digit hex numbers, converting to
decimal and adding the dots, gives which looks like an
IP ( but 'host' says it doesn't resolve: 3(NXDOMAIN) 

Similarly 'host' couldn't resolve api-89c8e17d into an IP address,
though it is evidently a private subdomain of See

> Nov 12 20:14:16.379 [15295] dbg: rules: ran uri rule
> __LOCAL_PP_NONPPURL ======> got hit:
> ""
Looking this up with 'host' got me the IP 
and a reverse lookup on that resolves it to:

IOW, its probably a good thing that it SA does think these are hex
addresses that can fire URI rules.


View raw message