http://bugzilla.spamassassin.org/show_bug.cgi?id=3888





------- Additional Comments From [EMAIL PROTECTED]  2005-06-07 17:36 -------
I may be beating a dead horse, but just to make it clear to anyone who finds
this while searching for similar things in the future:

The only way to detect this is to use the URL to fetch the page from the browser
to see if it has a refresh header.

That would let spammers insert web bugs which SpamAssassin would obligingly
trigger, i.e., URL's of the form
http://example.com/your_email_address_encoded_here...

That would also let spammers cause SpamAssassin to waste arbitrary amounts of
time and bandwidth following URLs they hide in spam.

We already have a way of detecting "bad" URLs without following them. If you
report your confirmed spam to SpamCop, the URLs in the spam end up in a database
that is one of the sources for some of the URIDNSBL blacklists that SpamAssassin
can use. If a URL can't be handled that way, then c'est la vie.

And that's why any proposal that requires following a URL should be a WONTFIX.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to