[spambayes-dev] Results for DNS lookup in tokenizer

Skip Montanaro skip at pobox.com
Sat Apr 10 22:49:25 EDT 2004


    Matt> I don't remember who mentioned it here first, but it seemed to me
    Matt> that adding a DNS lookup for URLs to the tokenizer would be a good
    Matt> idea. There's hardly any limit to the number of domains a spammer
    Matt> can register, but the number of networks that are willing to host
    Matt> a spammer's website seems to be reasonably small. So I hacked the
    Matt> tokenizer to generate tokens for the address that a URL in a
    Matt> message resolves to. 

Matt,

Doesn't mine_received_headers work for you?  I've got lots of tokens in my
database like:

    received:65.248
    received:65.248.59
    received:65.248.59.178
    received:65.248.59.196
    received:65.248.59.35

which records all the possible fragments of the ip addresses through which
the mail moves.

Skip



More information about the spambayes-dev mailing list