|
Seem like a quick filter to write...just check
for "yadayada". "ipaddress" might be used too often in legit mail,
but less should use "yadayada". You might even try the
combo..."ipaddress/yadada"...very little legit mail should use that
combo...
<grin>...a little sleepy Sunday afternoon
humor...
Darin. ----- Original Message -----
From: Dave Doherty
Sent: Sunday, October 31, 2004 2:00 PM
Subject: [Declude.JunkMail] IP link detection? Hi,
Does anyone have a filter that detects
links that are of the form http://ipaddress/yadayada?
Virtually all the phishing emails that
I've seen recently use this form. Since it seems unlikely that a significant
number of senders would use a link to an IP address
legitimately.
-Dave Doherty
Dataworld, Inc. Skywaves, Inc. 301-652-8822 x209 |
- Re: [Declude.JunkMail] IP link detection? Darin Cox
- Re: [Declude.JunkMail] IP link detection? Dave Doherty
- Re: [Declude.JunkMail] IP link detection? Matt
- [Declude.JunkMail] Aliases/Forwards/Processing Gary Brumm
- Re: [Declude.JunkMail] Aliases/Forwards/Proces... R. Scott Perry
- Re: [Declude.JunkMail] IP link detection? Dave Doherty
- RE: [Declude.JunkMail] IP link detection? Markus Gufler
- Re: [Declude.JunkMail] IP link detection? Dave Doherty
