On Sun, 26 May 2002 the voices made Rob McMillin write:
> More mortgage spam. This one somehow evaded all the normal tests; I
> would propose the following modification to NORMAL_HTTP_TO_IP as a
> countermeasure:
>
> uri NORMAL_HTTP_TO_IP /https?\:\/\/\d+\.\d+\.\d+\.\d+/is
> describe NORMAL_HTTP_TO_IP Uses a dotted-decimal IP address in URL
>
> This may slow down the test, but it will catch redirects such as the one
> below.
How much thinking is spent on slowness vs. catching the most spam?
/Tony
PS NORMAL_HTTP_TO_IP /https?\:\/\/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/is
--
# Per scientiam ad libertatem! // Through knowledge towards freedom! #
# Genom kunskap mot frihet! =*= (c) 1999-2002 [EMAIL PROTECTED] =*= #
-- Random URL (7/8):
<URL: http://apple.slashdot.org/ > Apple for Nerds. Stuff that matters...
_______________________________________________________________
Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
