[SA-exim] Greylisting mails with URLs

[Marc MERLIN]

On Fri, May 21, 2004 at 12:16:41PM +0100, Paul Makepeace wrote:
> I'm going to toss this idea out there without even looking at the code
> just in case anyone wants to pick this up.
> 
> Pretty much the only spams getting through here at this point are those
> that really do not look like spam and contain just a URL ("click here for
> more www.medserver.b1z"). Now, there are look-ups based on domain name/URI
> e.g. http://www.surbl.org/ ; (heck I even wrote one, http://sdbl.org/
> ) but they take time to get reported.
> 
> So - I would like to have emails that contain a URL or even
> (un-whitelisted) domain name in the body of the mail to be deferred for
> some time during which time one hopes the domain'll end up on spamcop.
> http://www.spamcop.net/w3m?action=inprogress&type=www which is then fed
> or in my own list.
> 
> Roughly: something to tag the email with a "URL/domain of some
> description whatever detected" and then in the GL code look for that
> domain and possibly use that as an additional or parallel GL parameter
> along with envelope and host info.

I don't think I ever replied to you on this.
It's an interesting idea, although there may be some implementation
challenges.

I'll see what I can come up with, although it probably won't be for SA-Exim
4.1 (yes, yes, I haven't forgotten, nor have I fallen off the face of the
planet quite yet :)

Marc
-- 
"A mouse is a device used to point at the xterm you want to type in" - A.S.R.
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
Home page: http://marc.merlins.org/   |   Finger marc_f at merlins.org for PGP key