On Thu, Dec 06, 2007 at 11:52:30AM -0500, Rosenbaum, Larry M. wrote:
> Some time ago (and more than once) there have been discussions on this list 
> about email containing hyperlinks where the link text is a URL that doesn't 
> match the URL in the link HREF, and the pros and cons of testing for and 
> scoring these mismatched links.  My management has raised this issue.  My 
> memory is hazy on what the final opinions were - it seems like this was 
> initially discouraged, but later discussions may have been less discouraging. 
>  Could somebody point me to the threads where this is discussed?  Also, does 
> SpamAssassin currently contain any rules for this kind of testing, or are 
> there third-party rules that do this?

http://wiki.apache.org/spamassassin/AntiPhishFakeUrlRule

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4255#c24 has a good
amount of info.

It all resulted in a single rule:

  0.021   0.0247   0.0017    0.935   0.53    0.00  HTTPS_IP_MISMATCH

which obviously isn't very helpful and still has false positives.

-- 
Randomly Selected Tagline:
"I protect home plate like a mormon girl on prom night."
         - Mimi on the Drew Carey show

Attachment: pgpUjzpOxxZUi.pgp
Description: PGP signature

Reply via email to