new spam getting through

[Peter Ong]

Has anyone else tried these sa plugins? I've implemented them in our gateways, so no results yet. I did a rudimentary test on it... seems to be okay.

p

----- Original Message -----

> From: "Jim Barber" <jim.barber at ddihealth.com>
> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> Sent: Thursday, December 2, 2010 5:35:42 PM
> Subject: Re: new spam getting through
> 
> On 2/12/2010 8:01 PM, Steve Freegard wrote:
> > Try my short URL decoder plug-in that I wrote for SA:
> >
> > http://www.fsl.com/support/DecodeShortURLs.pm
> > http://www.fsl.com/support/DecodeShortURLs.cf
> >
> > You'll need to add x(dot)co to the shortener list though; the other
> 
> > defaults should work fine.
> >
> > Put both files in /etc/mail/spamassassin and restart MailScanner to
> 
> > get SA to start using the new plugin.
> >
> > This will allow SA to 'see' the decoded URI and check it against URI
> 
> > blacklists or local 'uri' rules, so you have plenty of options to 
> > start blocking these.
> >
> > Regards,
> > Steve.
> 
> Thank you! :)
> 
> I've been getting a lot of the same sort of emails with encoded short
> 
> URLs slipping in in the past week or so.
> This plugin should go a long way towards stopping them.
> 
> ----------
> Jim Barber
> DDI Health
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!