Craig
I found SA 3.0.3 correctly spotted this and fed it to surbl.org URI-RBLs which trapped it.
-- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300
Craig Baird wrote:
Most of my spam that's getting through at this point is stuff that has a URI with multiple carriage returns in it like this:
<A href="h ttp://eafbfowksugw.org&ghikk2hnvo32i7d21gun%2Eetn eanim bme%2Ecom/">
I know this trick has been discussed. I looked for a bug report, and couldn't find one on this particular thing. I did find a thread in the archives about this, and a couple of rules were suggested, but someone mentioned that at least one of the rules results in a lot of FPs. Is anyone aware of a rule that will catch these that doesn't trigger a lot of FPs?
Thanks!
Craig
**********************************************************************
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager.
This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean.
**********************************************************************