One of SpamChk's Link-tests is called "IPLink".
You can simply assign a weight of x points if at least one IP link is part of the mailbody.
 
 
Markus
 
 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: Sunday, October 31, 2004 8:00 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] IP link detection?

Hi,
 
Does anyone have a filter that detects links that are of the form http://ipaddress/yadayada?
 
Virtually all the phishing emails that I've seen recently use this form. Since it seems unlikely that a significant number of senders would use a link to an IP address legitimately.
 
-Dave Doherty
 Dataworld, Inc.
 Skywaves, Inc.
 301-652-8822 x209

Reply via email to