Scott,

Have you considered checking the email with comments and then stripping them
and checking it without.



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Friday, July 05, 2002 10:22 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Word Filters - Spammers getting smarter



>You can see - spammers are adapting their message bodies to outsmarten the
>HEUR and the FILTER tests.
>
>(Of course, he eventually got lazy and used <!----> - and, the word
"remove"
>still appears in the URL and was not URLencoded.)
>
>
>   You are receiving this email as a subscr<!--dealers-->iber<br>
>   to the Opt<!--dealers-->-In Ameri<!---->ca Mailin<!---->g Lis<!---->t.

Yes, this is becoming more common.  We are thinking about adding a test
that checks for a high number of comments within an E-mail.
                              -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to