From robb@hyperlink-interactive.co.uk Tue Feb 22 15:20:07 2005
From: Robert Brooks <robb@hyperlink-interactive.co.uk>
To: discuss@lists.surbl.org
Subject: [SURBL-Discuss] Re: Spammer Anti-SURBL tactic
Date: Tue, 22 Feb 2005 14:19:06 +0000
Message-ID: <421B3F5A.3040106@hyperlink-interactive.co.uk>
In-Reply-To: <Pine.HPX.4.58.0502220402231.29837@d-is00.icaen.uiowa.edu>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============4649779941124860181=="

--===============4649779941124860181==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

David B Funk wrote:
> I'm seeing a new spam varient that is clearly designed to get
> past SURBL. It is an HTML message that contains many (50~100)
> 'invisible' links; links that have no target text, just:
> <A href="http://garbage.sitename.tld"></A>

> Is it time to create rules to penalize large numbers of 'invisible'
> links?

it would also be good to discard pointless links before querying 
surbl's, not sure how easy that is going to be to code though

-- 
Robert Brooks,           Network Manager,          Cable & Wireless UK
<robb(a)hyperlink-interactive.co.uk> http://hyperlink-interactive.co.uk/
Tel: +44 (0)20 7339 8600                      Fax: +44 (0)20 7339 8601
-  Help Microsoft stamp out piracy.  Give Linux to a friend today!   -

--===============4649779941124860181==--