On Wed, Apr 21, 2004 at 10:57:49PM -0800, John Andersen wrote: # On Wednesday 21 April 2004 04:35, Tom Allison wrote: # # > > spamassassin wasn't catching had a very high percentage of links to # > > domains that were under a month old, most under a week old. # > # > This would work up until they moment that they change their addresses to: # > http://24.203.43.129/freegoop.html # # True, but even my grandmother wouldn't trust numeric IPs in # a url....
Bet she wouldn't know better if that url were hidden inside an
``<a href="...">http://www.amazon.com/deals/free/</a>''
url, now would she? Never seen a spammer do that before..
Precisely. I see this frequently.
you would have to not only capture the IP, but all the domains associated with that IP. Unfortunately, the load against the whois/dns database servers might be a bit more than we can tolerate.
DNS caching would become extremely important.
------------------------------------------------------- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 _______________________________________________ Razor-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/razor-users
