> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Friday, March 05, 2004 12:37 PM > To: Greg Cirino - Cirelle Enterprises > Cc: Robert Brooks; SpamAssassin Mailing List > Subject: Re: New grubby med spammer sneeking through > > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > "Greg Cirino - Cirelle Enterprises" writes: > >From: "Robert Brooks" <[EMAIL PROTECTED]> > >| What I'm talking about is the webservers such that when > some link=20 > >| http://www.example.com/foo turns up in an email then SA > can look up = > >the host and=20 > >| see if it's being used in other spamvertisments. > > > >That's different, never mind > > > >If I Now understand correctly, you want a body search for url looking > >text and do a lookup on found urls? > > This is already in SVN trunk -- the URIBL plugin. It works *great*. > > Regarding avoiding DOS attacks with hundreds of URLs -- it selects > up to 20 randomly and tests just those, and we have another rule > which matches messages with too many URLs in the message which is > getting good results. > > - --j.
In a word...."cool!" :-) I should have known you guys would work this out! This would greatly reduce the size of my Bigevil. Not eliminate as numbers have shown. But would cut it by at least 40%-60%! Until someone comes up with a pure URIRBL server. THen I can move on to other projects ;) --Chris
