-----Original Message----- From: Jeff Chan [mailto:jeffc@surbl.org] Sent: Wednesday, January 04, 2006 3:56 AM To: SpamAssassin Users; SURBL Discuss Subject: Google search as spam URI
This drug spam message body seems problematic, since the URI is google, being used to search for the spammer's. Naturally the actual spammer domain bluevallet.com is blacklisted. This showed up Tue, 03 Jan 2006 14:45:48 +0100
__
Also FWIW, we auto-listed bluevallet.com on black.uribl.com at
bluevallet.com Listed: 2006-01-03 06:38:02 CDT (-0500 UTC)
What I'm wondering is "how", since this shouldn't be showing up in the dns query stream if people were not using the google redirector pattern....
D
On Wednesday, January 4, 2006, 6:39:40 AM, Dallas Engelken wrote:
Also FWIW, we auto-listed bluevallet.com on black.uribl.com at
bluevallet.com Listed: 2006-01-03 06:38:02 CDT (-0500 UTC)
What I'm wondering is "how", since this shouldn't be showing up in the dns query stream if people were not using the google redirector pattern....
Perhaps they used it in a more conventional fashion first, e.g., without the google part.
Jeff C.
-
Dallas L. Engelken -
Jeff Chan