We had an Apple ID phishing mail through this morning - and while I was in the process of giving the SpamAssassin a kicking, I saw that the DecodeShortURLs plugin was discarding "https://tr.im/something"
So I altered the regex to take https into account, and suddenly the same mail scored 23.6 due to having blacklisted URIs in it ;)
Hi,
We had an Apple ID phishing mail through this morning - and while I was in the process of giving the SpamAssassin a kicking, I saw that the DecodeShortURLs plugin was discarding "https://tr.im/something"
So I altered the regex to take https into account, and suddenly the same mail scored 23.6 due to having blacklisted URIs in it ;)
Best Regards, Nick.