5 Replies Latest reply on Sep 27, 2013 4:10 AM by mardes

    Wrong categorization Malicious Site

    mardes

      Hello!

       

      We see a following problem:  Some URLs are categorized  to category  "Malicious Sites" 

       

      though  due to McAfee TrustedSource  hey are  an uncategorized URLs.

       

      Some examples:

       

      http://www.trfv.de/                                                                       OK      
      http://www.trfv.de/index.php                                                     Category:Malicious Sites

       

      http://www.helpgreekanimals.org                                                                                                                                 OK

      http://www.helpgreekanimals.org/index.php                                                                                                              OK

      http://www.helpgreekanimals.org/index.php?option=com_content                                                                     Malicious Sites

      http://www.helpgreekanimals.org/index.php?option=com_content&view=article&id=103 &Itemid=350      Malicious Sites

       

      Moreover, there's an influence  of setting  "Do a forward DNS lookup to rate URL"    in   settings  URL.categories<Default>

       

      When we disable this categorization for all above URLs is  OK   (though  FQDN part of URL is the same)

       

       

      rule:

      rule-URL-category.bmp

       

      settings-URl-filtering.bmp

       

       

       

       

      Why has DNS lookup an effect when just changing  the path part of URL?

       

      Why are these URL categorized as  "Malicious Sites"  though not listed  at McAfee  TrustedSource?

       

      Best regards,

       

      Michael