Klaus Heinz wrote: > Hi, > > these days I got my first spam mail containing control characters in URLs, > I think from some spammer called Empire Towers. > > Although 20_uri_tests.cf contains the test HTTP_CTRL_CHARS_HOST, it wasn't > triggered by this mail. I got curious because of this and the slight > difficulties to investigate the resulting IP addresses of the URLs :-). > > HTTP_CTRL_CHARS_HOST does not trigger because the test never sees those > URLs. The following > > >http://www.05-cray.category.unique.zaam.net^A^T^T^T.co.fr|https.am2002.goopt.com:8101 > > appears as 2 separate URLs > > http://www.05-cray.category.unique.zaam.net > > and > > https.am2002.goopt.com:8101
Mozilla mail Highlights just one detected URL, from the http:// up to (but not including) the pipe symbol. That doesn't seem to be what you're expecting. What does Outlook Express do? Also, if you're going to fix this we need tests to show that the fix does indeed work. See other tests that I've written in the rules files. Matt. _______________________________________________________________ Hundreds of nodes, one monster rendering program. Now that's a super model! Visit http://clustering.foundries.sf.net/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
