On Fri, 17 Nov 2006, Jeff Chan wrote: > It seems that the particular URI obfuscation in: > > http://www.surbl.org/evidence/seruikiontunhfasnde.com.txt > > successfully confuses SpamAssassin 3.1.6 into not detecting the > SURBL blacklisted URI.
How about a rule that adds points for a link with no quotes around the URI? That can't be too common in legitimate mail. You could also add points for a URI with no dots in the "hostname" part. -- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ [EMAIL PROTECTED] FALaholic #11174 pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- [Small arms] are fundamentally dangerous and their removal from the equation either by control, neutralisation or removal is essential. The first step is to gain information on their numbers and whereabouts. -- the UN, who "doesn't want to confiscate guns" -----------------------------------------------------------------------
