http://bugzilla.spamassassin.org/show_bug.cgi?id=2901

           Summary: AOL redirect service now being abused --- check needed
           Product: Spamassassin
           Version: 2.61
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P4
         Component: Rules
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


Just received my first spam that abuses the AOL redirector. The offending URL 
was:

http://www.aol.com/ams/clickThruRedirect.adp?1073757372,2147618210x2147531923,
http://shopping888.com/?rd=15

For the time being I've setup the following local rule. Something along these 
lines should be incorporated into the base distribution. As with MSN redirector 
abuse the score should be relatively low since it is expected that the target 
URL will be outside the AOL domain (unlike the Yahoo redirector). Also, it 
would 
be great if the target URL was extracted and run through the "uri" tests 
independently (this should be done for the Yahoo and MSN redirector URLs as 
well). If that were done then the score for using a redirector could be lowered 
even further making it less likely that a legitimate use of a redirector will 
result in a message being flagged as spam.

uri      AOL_REDIR m{^https?://www\.aol\.com/clickthruredirect\.adp}i
describe AOL_REDIR Has AOL Redirect URI
score    AOL_REDIR 2.15



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to