On Monday, July 26, 2004, 12:32:43 PM, Ryan Thompson wrote: > Ben Poliakoff wrote to [EMAIL PROTECTED]:
>> If you add "http://"; to "MUNGEDgaming-money.com" both SA 2.63 with >> SpamCopURI and SA 3.0rc2 register SURBL hits (the domain is listed in >> several SURBL zones). But the bare domain name doesn't hit. > Yes. >> Of course such spam may not become really widespread since the user is >> presumably forced to type in the URL. Nevertheless it's frustrating >> to see it slip through the net. >> >> Thoughts? > It shouldn't be too hard to adjust the code to snag bare domains from > each email. I.e., anything on a word boundary that ends in (any one of > some list of TLDs), or, even naievely, some less-accurate regular > expression along the lines of /\b(.+?)\.[a-z]{2,}\b/i . This would > result in more queries to the SURBL servers, but perhaps the tradeoff > would be worth it, if enough spam like this came in. > Of course, then spammers will further munge the domains, to gaming-money > dot com and whatnot, making it even more difficult for users to reply to > their offer, which is a good thing. The more we can force spammers to > frustrate that infinitesimal percentage of idiots out there and prevent > them from responding, the better. Indeed, if we've influenced spammers into not being able to include live URIs in their messages, then we've already had some effect. Asking people to take the extra steps to cut and paste spamvertised sites into their browser might make a dent in their activities. Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
