Re: URI's and geocities subwebs..
On 05/01/2006 11:23 AM, Matt Kettler wrote: Billy Huddleston wrote: Is their a way to get the URI's to look at stuff like this?? I'm seeing more and more spam with these kinds of things in them to get by URI detection.. http://asia.geocities.com/april19781matt1487 Do you mean URIBL's? Not likely without major change.. URIBLs only look up the domain name, not the subdomain, and not the path. To SA's URIBL tests, the above is just "geocities.com". This kind of thing is currently best covered by SARE's specific and uri rulesets. If you can bear an HTTP query on the Geocities URIs, I've had excellent results over the last four or five months with my WebRedirect plugin. http://wiki.apache.org/spamassassin/WebRedirectPlugin Daryl
Re: URI's and geocities subwebs..
>... >Is their a way to get the URI's to look at stuff like this?? I'm seeing = >more and more spam with these kinds of things in them to get by URI = >detection.. > >http://asia.geocities.com/april19781matt1487 > >Thanks, Billy >... Not that it answers your question, but this is Robert Soloway using Geocities (again) and an apparently new host in Korea at 147.46.135.180. Paul Shupak [EMAIL PROTECTED]
Re: URI's and geocities subwebs..
Billy Huddleston wrote: > Is their a way to get the URI's to look at stuff like this?? I'm seeing > more and more spam with these kinds of things in them to get by URI > detection.. > > http://asia.geocities.com/april19781matt1487 > Do you mean URIBL's? Not likely without major change.. URIBLs only look up the domain name, not the subdomain, and not the path. To SA's URIBL tests, the above is just "geocities.com". This kind of thing is currently best covered by SARE's specific and uri rulesets.
Re: URI's and geocities subwebs..
Quoting Billy Huddleston <[EMAIL PROTECTED]>: > Is their a way to get the URI's to look at stuff like this?? I'm > seeing more and more spam with these kinds of things in them to get > by URI detection.. > > http://asia.geocities.com/april19781matt1487 I am seeing a lot of them as well, and now with other URLs than geocities. They all have one thing in common - they look like normal forwarded mail with an URL in it. Not easy to stay ahead of this kind of trash. -- Jon Kvebaek <[EMAIL PROTECTED]> Mobil: +47 992 19 829 Unanimiter et constanter Oslo
