Hello mouss, Monday, June 13, 2005, 8:15:27 AM, you wrote:
m> I just got the spam below (headers removed except few). m> would it be reasonable to add a rule to check for anomalies in URLs? m> what's the best (TM) way? 1) As has been suggested, upgrade. 2) Grab the SARE header rules file, which has rules for various types of header obfuscation. Note that those with 3.0.4 and the new header file get some double-hits. We'll be running a new overlap analysis soon to get rid of the duplicates. Bob Menschel
