Re: Greylisting mails with URLs

Marc MERLIN <[email protected]>
Newsgroups gmane.mail.exim.spamassassin
Message-ID <[email protected]>
On Fri, May 21, 2004 at 12:16:41PM +0100, Paul Makepeace wrote:
> I'm going to toss this idea out there without even looking at the code
> just in case anyone wants to pick this up.
> 
> Pretty much the only spams getting through here at this point are those
> that really do not look like spam and contain just a URL ("click here for
> more www.medserver.b1z"). Now, there are look-ups based on domain name/URI
> e.g. http://www.surbl.org/ ; (heck I even wrote one, http://sdbl.org/
> ) but they take time to get reported.
> 
> So - I would like to have emails that contain a URL or even
> (un-whitelisted) domain name in the body of the mail to be deferred for
> some time during which time one hopes the domain'll end up on spamcop.
> http://www.spamcop.net/w3m?action=inprogress&type=www which is then fed
> or in my own list.
> 
> Roughly: something to tag the email with a "URL/domain of some
> description whatever detected" and then in the GL code look for that
> domain and possibly use that as an additional or parallel GL parameter
> along with envelope and host info.

I don't think I ever replied to you on this.
It's an interesting idea, although there may be some implementation
challenges.

I'll see what I can come up with, although it probably won't be for SA-Exim
4.1 (yes, yes, I haven't forgotten, nor have I fallen off the face of the
planet quite yet :)

Marc
-- 
"A mouse is a device used to point at the xterm you want to type in" - A.S.R.
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
Home page: http://marc.merlins.org/   |   Finger [email protected] for PGP key
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.