Canadian pharmacy

[Ken A]

Peter Farrow wrote:
> Hi There,
> 
> The *only* spam getting through our MailScanner setup is simple one 
> liner drug spam that links eventually to Canadian Pharmacy via a 
> redirect, one user is getting just a couple every few days, which seems 
> to be more annoying for him that being flooded with them because he 
> notices it more.
> 
> Usually the link is via imageshack or some other blog type site.
> 
> If you follow the link in Explorer it eventually ends up at one of the 
> hundreds of Canadian Pharmacy urls.
> 
> If you "wget" the link you get a temporarily unavailable message because 
> the site checks the user agent,
> 
> but if you set the user agent sting you get the site, for example:
> 
> wget -U "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 
> 1.1.4322)" http://onlinedrugwin.com
> 
> Has any one written a plugin for MailScanner or does such a Sendmail 
> Milter exist that could go to these urls and then pipe it through spam 
> assassin, or is there a blacklist of known spam urls like the phishing 
> urls...

SA should already be checking URI blacklists.

milter-link can also check the uris found in spam against uribl and 
surbl. It can react to a broken link, but it won't check remote page 
content. That could be a bit dangerous.

Ken
Pacific.Net


> 
> Any help greatly appreciated.
> 
> Pete
> 
> 


-- 
Ken Anderson
Pacific.Net