Chapter 4: Managing Your Filtering Services
Domain Rules
For URL and Domain rules, Spamphibian Gateway looks in the message headers and body for all URLs and email addresses. Nearly all spam messages include URLs that the spammer hopes the recipient will click on. Sometimes this will be a simple URL like: http://populartablets.net, other times it may be more complex as in the following examples:
unsubscribe_link@random.subdomains.populartablets.net
http://l9fv8u3lkajnc.populartablets.net
http://www.populartablets.net/my/spam/site/index.html
http://www%2epopulartablets%2enet%2fbuy%2fsome%2fmeds%5fnow%2ehtml
In the examples above Spamphibian Gateway will see the populartablets.net domain. This filtering these kinds of messages simple even though the details of the URL may change frequently over a series of messages. All that is needed is a single rule "Domain" type rule with the following content:
A "Domain" rule with this content tells Spamphibian Gateway that it should look at all the URLs in a message and extract the domains to see if any of them match the content part of the rule (populartablets.net in this case). Domain rules are case insensitive.
Note: You can not use the "*" character with domain rules. Domain rules are always exact matches.
