On Thu, Dec 06, 2007 at 11:52:30AM -0500, Rosenbaum, Larry M. wrote: > Some time ago (and more than once) there have been discussions on this list > about email containing hyperlinks where the link text is a URL that doesn't > match the URL in the link HREF, and the pros and cons of testing for and > scoring these mismatched links. My management has raised this issue. My > memory is hazy on what the final opinions were - it seems like this was > initially discouraged, but later discussions may have been less discouraging. > Could somebody point me to the threads where this is discussed? Also, does > SpamAssassin currently contain any rules for this kind of testing, or are > there third-party rules that do this?
http://wiki.apache.org/spamassassin/AntiPhishFakeUrlRule http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4255#c24 has a good amount of info. It all resulted in a single rule: 0.021 0.0247 0.0017 0.935 0.53 0.00 HTTPS_IP_MISMATCH which obviously isn't very helpful and still has false positives. -- Randomly Selected Tagline: "I protect home plate like a mormon girl on prom night." - Mimi on the Drew Carey show
pgpUjzpOxxZUi.pgp
Description: PGP signature