[sanesecurity] Re: [sanesecurity]sulinet DOT hu domain incorrectly classified as a spammer

  • From: Bill Landry <bill@xxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Thu, 10 Mar 2011 09:10:28 -0800

On 3/10/2011 4:44 AM, Steve Basford wrote:
Recently I got a mail from a relative of mine, who is a network
administrator. The email was classified as infected according to this
signature:
INetMsg.SpamDomain-2m.sulinet_hu.UNOFFICIAL

Let me clarify: sulinet DOT hu is a domain, which is used by all primary
and
highschools of Hungary. Suli means school. It's possible, that spam might
originate from some parts of sulinet. In the mean time I'm sure, that
other parts of the network are properly configured.

I suggest to modify this signature.
At least "ipari604 DOT sulinet DOT hu" shouldn't be classified as a spam
source.

Hi,

Thanks for the report.

I'm sure Bill will take a look at this, however, I've removed the
signature, which will be updated on the mirrors in the next 10 minutes.

Thanks Steve, and thanks for the report Dwokfur. I have removed and whitelisted the domain so that it cannot inadvertently get re-added.

Regards,

Bill

Other related posts: