On 06/19/2013 10:54 PM, Amir Caspi wrote:
Perhaps SA should include a module/plugin to "unmunge" MailScanner munging? Has anyone written one, or if not, would anyone like to? ;-) (Since MailScanner is open-source perl, I imagine it should be relatively straightforward to find the munging code, write the reverse of it, and make that an SA plugin... I'm not sufficiently experienced to do it at the moment, but maybe someone else is interested.)
iirc, MailScanner munges the URL befor SA sees it so unless your plugin idea involves a crystal ball, it's not possible.
btw - all these spams have a very obvious trait. Look at the source thoroughly.
