On Fri, 15 Mar 2013, Christian Recktenwald wrote:

On Fri, Mar 15, 2013 at 10:38:53AM -0500, Dave Funk wrote:
On Fri, 15 Mar 2013, Kevin A. McGrail wrote:

On 3/15/2013 9:17 AM, Tom Kinghorn wrote:
     On 15/03/2013 15:11, Christopher Nido wrote:


http://www.naturalstonesinc-munged.com/aah/pabfjd/pgrezs

... listing the URLs in some kind of RBL will be probelmatic for FPs.

not really: The part 'aah/pabfjd/pgrezs' is most likely[tm] not
used in normal operation of this site.

The whole raison-detre for RBLs is that they're lists that can be
implemented via the DNS system (created, updated, distributed, queried, etc).
As such they can -only- contain IP addresses or hostnames, NOT URLs.

So using something like SURBL or URIBL you can only list the host name
part of that URL. If it's a legit site (albeit a compromised site)
this will result in false-positives for normal mail that references the site.

It would be possible to create explicit SA rules to hit the full URLs but
that becomes a whack-a-mole proposition and more resource intensive than
just dropping a new entry in a RBL master zone file.



--
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{

Reply via email to