On Fri, 2009-07-10 at 10:58 +0100, Steve Freegard wrote: > rich...@buzzhost.co.uk wrote: > > On Fri, 2009-07-10 at 21:26 +1200, Jason Haar wrote: > >> On 07/10/2009 09:01 PM, Paweł Tęcza wrote: > >>> Please see my initial post on Pastebin: > >>> > >>> http://pastebin.com/f6a83e9fb > >>> > >> If it's true that all those domains resolve to just a handful of IP > >> addresses, then why aren't they listed in - oh wait - SURBLs don't cover > >> IPs just the DNS names - argh! > >> > >> Is there a way to do SURBL lookups of the IP instead of the FQDN? > >> > > Is there not some kind of 'intent' plugin for SA? > > > > Barracuda (which steal everything else) have an intent scanner that > > looks at links in mails and resolves the name to IP *AND* the AUTH NS. > > Then looking the IP's found up. > > > > I can't believe they wrote it themselves - seriously I can't! What plug > > in is it? > > > > > > See 'uridnsbl' in Mail::SpamAssassin::Plugin::URIDNSBL > > Regards, > Steve. And there was I trawling through their Perl modules, lists of millions of domains and .idx files only to be pointed to:
Mail::SpamAssassin::Plugin::URIDNSBL R E S U L T ! Looks *very* interesting.