Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Florian Lagg
Hello! In the last few days my Spamassassign does not filter a (for me) new kind of spam. I have an idea how to fight this spam and want to ask the list if this is possible with SA. First a short analysis of what's going on: 1st fact: I get mails like this one: ---

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Theo Van Dinter
On Wed, Jan 07, 2009 at 04:46:44PM +0100, Florian Lagg wrote: So - if possible - I want spamassassign to: 1. Request the links in the mail body and check them for http-error 302 or meta redirects 2. Check the links we got by doing this against some DNSBL's Is this possible? Is there a

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Greg Troxel
Besides the DDOS issue, there's a privacy issue, which is messy with DNSBLs already. Nothing SA does should send network traffic to a place controlled by the mail sender. Checking a DNSBL for which there's some reason to believe they aren't underhanded is one thing, but fetching stuff from a

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Henrik K
On Wed, Jan 07, 2009 at 12:44:39PM -0500, Greg Troxel wrote: Besides the DDOS issue, there's a privacy issue, which is messy with DNSBLs already. Nothing SA does should send network traffic to a place controlled by the mail sender. Checking a DNSBL for which there's some reason to believe

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Raymond Dijkxhoorn
Hi! Besides the DDOS issue, there's a privacy issue, which is messy with DNSBLs already. Nothing SA does should send network traffic to a place controlled by the mail sender. Checking a DNSBL for which there's some reason to believe they aren't underhanded is one thing, but fetching stuff

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Benny Pedersen
On Wed, January 7, 2009 19:05, Raymond Dijkxhoorn wrote: Besides that, its a perfect way to ack your address to them. If they make a url like blah.at.blah.com and thats corresponding to your address, like this or url encoded they know your address is active, real handy. it olso works on

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Jeff Mincy
From: Theo Van Dinter felic...@apache.org Date: Wed, 7 Jan 2009 11:36:18 -0500 On Wed, Jan 07, 2009 at 04:46:44PM +0100, Florian Lagg wrote: So - if possible - I want spamassassign to: 1. Request the links in the mail body and check them for http-error 302 or meta

AW: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Florian Lagg
You can look at the WebRedirect plugin on http://wiki.apache.org/spamassassin/CustomPlugins Possible? Sure. Should? Not unless you want to turn your (and anyone else running that code's) machine into a DDoS client. In other words, while it's possible to shoot yourself

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Rob McEwen
Florian Lagg wrote: In the last few days my Spamassassign does not filter a (for me) new kind of spam. I have an idea how to fight this spam and want to ask the list if this is possible with SA. snip More examples: -- Hey! Do you believe that when New Year