help fighting spam

[Jon Bjorn Njalsson]

am i misunderstanding you guys or what ?

ok i am using SA with MS and have been running razor + SARE rules for a
long time. 
I think by uri-rbls are working because "most" of the time this spam is
stopped because "the website" has been reported to uribl.com
I have reported about 30 websites for the last 3 days to uribl.com
but some male enlargement spam is still getting through.

I have checked my dns querylogs and can verify the dns server looks up
those "sites" and if they are listed email gets quarentined, BUT how can
i get SA to check if the ipaddress for that particular site is listed or
not ? I really don´t care if the "site" is listed in uribl because the
site is only listed in dns for a day or 2 but the ipaddress remains the
same.

:) regards
jon

 On mið, 2007-01-17 at 16:21 +0000, Ian wrote:
> On 17 Jan 2007 at 16:10, Martin.Hepworth wrote:
> 
> 
> > Jon
> > 
> > I'd check you URI-RBLS are working (as I think I suggested on the
> > sa-users list ;-)
> > 
> > Also dcc/pyzor/razor and the SARE/fred rules from
> www.rulesemporium.com
> > are useful (can't remember if I already mentioned this..)
> 
> 
> Hi,
> 
> 
> I can second this as all the emails you sent to the spamassassin list
> with that particular web address (I won't repeat it) were picked up by
> these rules:
> 
> 
> 3.00 URIBL_BLACK   
> 4.09 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist 
> 
> 
> Luckily they fell just under my high scoring spam score because of
> BAYES_00 or I wouldn't have seen them :)
> 
> 
> Regards
> 
> 
> Ian
> -- 
> 
> 
> 
> 
> 
> 
>