[Mimedefang] Re: Ebay Redirecotr (Fw: Account Verification)

James Ebright jebright at esisnet.com
Tue Feb 22 09:41:49 EST 2005

Lint output: warning: description for KAM_EBAYREDIR is over 50 chars 
lint: 1 issues detected.  please rerun with debug enabled for more 

Need to shorten the description if you want to avoid seeing the lint 
warnings. (this is esp important if you use any SARE rulesets and rulesdujour 


On Sun, 20 Feb 2005 08:45:52 -0500, Kevin A. McGrail wrote
> In the meantime, here's an SA Rule to help catch it which I would appreciate
> feedback about:
> # This rule is to mark emails using the exploit of the eBay redirector
> uri             KAM_EBAYREDIR    /.*.ebay.com.*RedirectToDomain/i
> describe        KAM_EBAYREDIR    Attempted use of eBay redirector - high
> probability of fraud
> score           KAM_EBAYREDIR    7.0

EsisNet.com Webmail Client

More information about the MIMEDefang mailing list