Hi Jeff, At 06:33 15-04-2005, Jeff Chan wrote:
By the way, being able to redirect to the SURBL website does not prove that a redirector is open, only that it can redirect to the SURBL website. A better test would be to see if it will redirect to a major spammer's site, for example any that are listed in multiple SURBLs.
That will give spammers a list of redirectors to use without them having to read these mailing lists. :)
Why are open redirectors being abused? The simple answer is because they are open. The detailed answer is because some antispam filters perform URI checks to block messages. Is it be possible to detect which URIs are redirectors and identify the target URIs instead of going on an open redirect chase?
Regards, -sm