[SPAM-TAG] [SURBL-Discuss] Subdomains in SURBL
sm at resistor.net
Fri May 12 21:47:10 CEST 2006
At 09:31 12-05-2006, Brandon Hutchinson wrote:
>Since I don't think including subdomains in SURBL zone data does any
>SpamAssassin's URIDNSBL implementation, I was just wondering what else people
>are using to look up URIs in SURBL. Other sendmail milters that do not use
I use a milter.
>Using the "www.freecat.biz" example: assuming this is a phishing
>also including "freecat.biz" in SURBL be a bad idea? Are there cases where we
>should "trust" the base domain even when a subdomain is used in a phishing
You would look up freecat.biz in the above example. See
http://www.surbl.org/implementation.html for implementation
guidelines. If it is a phishing email, I would not trust the base
domain. A whitelist is also required.
More information about the Discuss