Greetings list!
I've been sitting on this one for a while, hoping an update would be released in one of the sa-update channels... but it seems that users are complaining about the continued high false negative identification of spam messages containing only a google.com, googlepages.com, or google.co.uk (etc) URI redirect to a spammer's site (sometimes a spammed-owned googlepages account or a ?q= or ?search= type redirect). Sometimes I get network digest check hits or SURBL hits, but all too often, these messages make it through.

What's the best way to identify these messages? Do I need to write a redirector_pattern for these Google-related URI redirects, or is there more to it than that? What are you folks doing at your sites?

Thanks in advance.

Reply via email to