Possibly the HTML comment was cleanedup from the message body before the 
URIBL check was done.
ASSP uses several modules to parse/decode/encode an email. It is possible 
that this malformed comment was removed, because it could'nt be parsed.


Thomas




Von:    Michael Thomas <m...@mathbox.com>
An:     ASSP development mailing list <assp-test@lists.sourceforge.net>
Datum:  21.03.2012 07:03
Betreff:        [Assp-test] URL in malformed comment



Hi,

Recently, I have seen several spam email from yahoo.com containing a URL 
inside an unterminated HTML comment in a plain text message. The URL is 
not caught by ASSP.

I am trapping them via regex, but I thought you might like to see.

===============================
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


=0A oekrnqulzwpbhmvpzq7.=20



  incident !yours. concerning!anybody ulwqwhatever .all?race !atop-=20

<!---20 percent discount-Sex=C3=84=E2=80=9EPills=20
 
http://dgjl=C3=84=E2=80=A0rrbd=C3=84=C2=B0.ukrainesixteen.ru_________remov=

evpgbaxs.pp=20

1}}
   3dfedf62721f9879 Simultaneously the alarm whistles started a 
discordant c=
oncert. .
===============================


-- 
Michael Thomas
Mathbox
978-687-3300
Toll Free: 1-877-MATHBOX (1-877-628-4269)


------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************


------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to