>They all use lots of good text hidden...

I think HMM will detect these mails.
- setup HMM
- move all such files in the right corpus folder !
- run a rebuildspamdb

Forget to detect a spam mail on html tags. This will lead in to a never 
ending storry.
Put such a mail in the analyzer - you'll see the words are used by assp 
bayes.

Thomas




Von:    K Post <[email protected]>
An:     ASSP development mailing list <[email protected]>
Datum:  10.02.2012 23:00
Betreff:        [Assp-test] block specific pattern



Hi again.

Over the last 3-4 days I've seen a HUGE increase in spam slipping
through.  All from lots of different "legit" (compromised) mail
servers/accounts.  They all use lots of good text hidden in the
message.  The only thing in common is some of the html formatting,
which is what I want to catch.

All of the messages have this at the bottom:
<br><center><a href="http://somedomain.com/abunchofnumbersandletters";><img
src="http://somedomain.com/abunchofnumbersandletters.gif";
border="0"></a></center>
</body>
</html>

The thing that varies is the host name and the series of numbers and
letters.  That same hostname and series is repeated in the img tag,
but trailing with a .gif.

I'm fearful of rejecting legit mails that might use this kind of
tracking, but don't know what else to do....

Some users are getting hundreds of these a day.

Thaks

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to