I agree, wouldn't it be easier to uniformly feed all of these type of URL's
though the already existing SA filters. As Jason suggested maybe by
collapsing whitespaces?

Sounds like the obvious solution to me? Any problems with this? If not how
can it be done?


-----Original Message-----
From: Jason Haar [mailto:jason.h...@trimble.co.nz] 
Sent: Sunday, 28 June 2009 9:28 AM
To: users@spamassassin.apache.org
Subject: Re: [NEW SPAM FLOOD] www.shopXX.net

All this talk about trying to catch urls that contain spaces/etc got me
thinking: why isn't this a standard SA feature? i.e if SA sees
"www(whitespace|comma|period)-combo(therest)", then rewrite it as the
url and process.

That way you get the whole force of SURBLs/etc onto it? I'm assuming all
these "shop" urls this thread has been agonizing about are already in
RBLs of course...

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


Reply via email to