You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@spamassassin.apache.org by Justin Mason <jm...@jmason.org> on 2006/11/18 14:45:37 UTC

Re: URI obfuscation that confuses SA

Matt Kettler writes:
> Jeff Chan wrote:
> > It seems that the particular URI obfuscation in:
> >
> >   http://www.surbl.org/evidence/seruikiontunhfasnde.com.txt
> >
> > successfully confuses SpamAssassin 3.1.6 into not detecting the
> > SURBL blacklisted URI.
> >   
> 
> Does that even work as a link? Doesn't seem to work in firefox or IE for
> me..

it's:

  <a href=http://8ZC*2/F3B.seruikiontuMUNGED.com/?LHN-+IA- >
  link</a>

Surely that doesn't work.  certainly doesn't with any of my MUAs!  anyone
got a copy of Lookout or Outlook Express they can test with?

--j.

Re: URI obfuscation that confuses SA

Posted by Benny Pedersen <me...@junc.org>.

On Sat, November 18, 2006 14:45, Justin Mason wrote:

> <a href=http://8ZC*2/F3B.seruikiontuMUNGED.com/?LHN-+IA- >
> link</a>
> Surely that doesn't work.  certainly doesn't with any of my MUAs!  anyone
> got a copy of Lookout or Outlook Express they can test with?

fedora core 6 x86_64 firefox 1.5.0.8 display the link ok, if munged was intended

-- 
This message was sent using 100% recycled spam mails.