I believe the hmtl decoding already takes care of the second example. As for the
first, I've had great success targeting spoofing directly:
BODY0 CONTAINShttp://7#
BODY0 CONTAINShttp://8#
BODY0 CONTAINShttp://9#
BODY0 CONTAINS
please make sure to detail the
skip, onlysenif, ... and all other eml control options
thanks for the best support anywhere
(even better than ours :) )
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, July 25, 2003 2:53 PM
Subject: Re:
I was wondering if you had considered a keyword modifier URL for the
wordfilter configuration file that would mean for Declude to assume the
following field is a URL and to test all variable encodings.
That's a very good idea -- and something we would definitely like to add.
This is kind of cool... I'm using it now as an RBL...
http://www.trustic.com/
Trustic is a new solution to the problem of unsolicited email. By
aggregating recommendations from its large community of members, Trustic
maintains a list of email servers that can't be trusted to prevent spam.
This
Josh,
What is the entry you have put in your config file? (If you don't mind
sharing)
Thanks
Jason
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Joshua Levitsky
Sent: Saturday, July 26, 2003 9:11 PM
To: [EMAIL PROTECTED]
Subject:
Sounds interesting, for how long have you been using it ? Do you have any
stats?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Joshua Levitsky
Sent: Sunday, July 27, 2003 4:11 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] New spamcop style RBL..
They give you 2 DNS servers to query. They are custom to your account. One
of them is just like any other RBL, but the other will add positive ratings
to the RBL so long as nobody has reported something negative about the IP
yet. You can flag IPs as Positive (they can switch to negative if people
Just briefly. The service is still in beta. I don't have any stats yet. If
you want to try it without risking anything just add the test with a zero
weight or something low. That's what I do when I want to see if a test is
picking stuff up, and I look through legit mail to see if it is picking
