[Mimedefang] Re: [SURBL-Discuss] Fw: Interesting Phishing Trick

Kenneth Porter shiva at sewingwitch.com
Wed Mar 8 19:25:40 EST 2006


--On Wednesday, March 08, 2006 2:24 PM -0800 Jeff Chan <jeffc at surbl.org> 
wrote:

> It's an interesting use, but I don't believe it would confuse
> SpamAssassin, etc.  The second URI should be visible enough to be
> checked, and I added the IP to ph.surbl.org.

Is there an SA rule that checks for nested anchors? (Either in 3.1 or 
SARE.) Any signs of this idiom in ham corpuses?





More information about the MIMEDefang mailing list