On Monday, April 12, 2004, 8:18:39 AM, Pete McNeil wrote: > * Spammers are definitely stuffing legitimate urls, domains, and fragments > into spam and the trend is increasing.
> * White and partial masking rules are numerous and required to avoid false > positives. In practice (as you point out) the list becomes large. sc.surbl.org has the advantage of the many SpamCop users reviewing their submissions for legitimate looking domains and unchecking them before they click Submit. So far it seems to help a lot. > PS: As bizarre as it seems, I have seen spammers cluster bomb rivals by > putting out dummy spam that contains links to rival spam targets... The > dummy goes nowhere and the rival links seem unrelated as if the purpose of > the message is to increase the filtering rate on the apparent rival > links/domains. However if *any* of the domains in a spam are on an SURBL list, the entire message will get tagged as spam (for mail servers using SURBL of course). The more spam domains the spammers add, including their spamming rivals, the better our chance of tagging the message as spam. Score one for the good guys if they try to take out their competitors this way. Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
