[Mimedefang] Re: Ebay Redirecotr (Fw: Account Verification)

[James Ebright]

Lint output: warning: description for KAM_EBAYREDIR is over 50 chars 
lint: 1 issues detected.  please rerun with debug enabled for more 
information.

Need to shorten the description if you want to avoid seeing the lint 
warnings. (this is esp important if you use any SARE rulesets and rulesdujour 
script).

Jim

On Sun, 20 Feb 2005 08:45:52 -0500, Kevin A. McGrail wrote
> In the meantime, here's an SA Rule to help catch it which I would appreciate
> feedback about:
> 
> # This rule is to mark emails using the exploit of the eBay redirector
> uri             KAM_EBAYREDIR    /.*.ebay.com.*RedirectToDomain/i
> describe        KAM_EBAYREDIR    Attempted use of eBay redirector - high
> probability of fraud
> score           KAM_EBAYREDIR    7.0


--
EsisNet.com Webmail Client