> Whether your idea is good or not, it has to do
> with a suggestion for how to use sa-learn, not anything to do with
development.
Hi Sidney, happy new year!
Actually, while he phrased the RFE in terms of sa-learn, it is actually
something that could be done as an SA plugin, if SA were run on the
spamtrap.
Since SA already accumulates the uris from the message, a modified URIBL
plugin could be written to go connect to the listed UIRs rather than to the
blacklist. Of course, you would want to run the normal plugin too, so that
these URIs get appropriately blacklisted in the future.
Since SA would be running on a spamtrap you could pull all of the normal
rules except a few URI net rules, and just have a single rule that
blacklisted every message that came in. That should result in relatively
low message parsing overhead, but still accomplish an intelligent result.
Loren
