Re: .link TLD spammer haven?

[Reindl Harald]

Am 25.10.2014 um 00:42 schrieb RW:

On Fri, 24 Oct 2014 21:31:51 +0200
Reindl Harald wrote:

Am 24.10.2014 um 21:20 schrieb Quanah Gibson-Mount:

--On Thursday, October 23, 2014 11:56 PM +0100 Martin Gregorie

Thanks for that. I've now installed it and have been running tests
against my spam corpus to make sure that this subrule:

     uri      __MG_LTD1   /\.link/i

was now working correctly. Its hit all the stuff I thought it
should, but my subrule turned out to be deficient because it will
also hit any URI containing .linkedin, so anybody who has copied
it should rewrite that rule so it looks like this:

     uri      __MG_LTD1   /(\.link$|\.link\/)/i

Even with that change, it always hits mail from linkedin

logical, the seond part of the "or" is not terminated and defeats the
first one and so the whole purpose of the "or"

In the second part the \.link has to followed by a '/'

thanks, i stand corrected

but then it should not catch "linkedin"

signature.asc
Description: OpenPGP digital signature