wikidiffs at apache
Apr 27, 2012, 7:15 PM
Post #1 of 1
(104 views)
Permalink
|
|
[Spamassassin Wiki] Trivial Update of "Rules/NUMERIC HTTP ADDR" by AndrewDaviel
|
|
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Spamassassin Wiki" for change notification.
The "Rules/NUMERIC_HTTP_ADDR" page has been changed by AndrewDaviel:
http://wiki.apache.org/spamassassin/Rules/NUMERIC_HTTP_ADDR?action=diff&rev1=29&rev2=30
## page was copied from Rules/HTML_EXTRA_CLOSE
## page was copied from Rules/HASHCASH_25
#language en
- == SpamAssassin Rule: HTML_EXTRA_CLOSE ==
+ == SpamAssassin Rule: NUMERIC_HTTP_ADDR ==
- ''Standard description:'' HTML contains far too many close tags
+ ''Standard description:'' Uses a numeric IP address in URL
=== Explanation ===
- The message contains unbalanced HTML. This suggests that it was not generated by a normal
- email client or HTML editor, but by some mailout software that is trying to hide hashbusting text or otherwise
- avoid filters.
+ Contains a URL with a numeric address, such as http://192.168.36.67
+ This may indicate a webserver set up quickly without a DNS entry, or an attempt to avoid domain-based filtering.
+ This indicates the message may be spam or [[http://en.wikipedia.org/wiki/Phishing|phishing]].
=== Further Info ===
|
