On Fri, 2009-07-10 at 21:26 +1200, Jason Haar wrote: > On 07/10/2009 09:01 PM, Paweł Tęcza wrote: > > Please see my initial post on Pastebin: > > > > http://pastebin.com/f6a83e9fb > > > If it's true that all those domains resolve to just a handful of IP > addresses, then why aren't they listed in - oh wait - SURBLs don't cover > IPs just the DNS names - argh! > > Is there a way to do SURBL lookups of the IP instead of the FQDN? > Is there not some kind of 'intent' plugin for SA?
Barracuda (which steal everything else) have an intent scanner that looks at links in mails and resolves the name to IP *AND* the AUTH NS. Then looking the IP's found up. I can't believe they wrote it themselves - seriously I can't! What plug in is it?
