The parm name entry is used outside of ActiveX, maybe not a good idea to include it here? Also, your scoring is going to be incremental with 4 for the filter in Global.cfg as well as 4 points for each line of the filter this hits. I'm not sure if that's what you intended.

While this is probably highly indicative of spam (ones with Active X controls embedded to play video for instance, plus some others, Java for instance), Web designers, and especially Flash programmers, will get blocked by this. The spammers sending this stuff out generally are static IP'd, and I would personally err on the side of letting the RBL's take care of it rather than introduce more potential for FP's on my system. I haven't seen this stuff getting through except in a very rare case.

Matt



Doug Anderson wrote:

If anyone wants
BODY 4 CONTAINS <object classid="
BODY 4 CONTAINS codebase="
BODY 4 CONTAINS .cab#version=
BODY 4 CONTAINS <param name="
ACTIVEX-FILTER filter ActiveX-filter.txt x 4 0
Seems to work. Anyone got anything else?



--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to