I agree, wouldn't it be easier to uniformly feed all of these type of URL's though the already existing SA filters. As Jason suggested maybe by collapsing whitespaces?
Sounds like the obvious solution to me? Any problems with this? If not how can it be done? -----Original Message----- From: Jason Haar [mailto:jason.h...@trimble.co.nz] Sent: Sunday, 28 June 2009 9:28 AM To: users@spamassassin.apache.org Subject: Re: [NEW SPAM FLOOD] www.shopXX.net All this talk about trying to catch urls that contain spaces/etc got me thinking: why isn't this a standard SA feature? i.e if SA sees "www(whitespace|comma|period)-combo(therest)", then rewrite it as the url and process. That way you get the whole force of SURBLs/etc onto it? I'm assuming all these "shop" urls this thread has been agonizing about are already in RBLs of course... -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1