> What would you do with those mail that change the
> color, delete them, put them on hold?
Use it in a weighting system.
> Or...... do you think
> these color statments are used in the same way the comment
> tags are being used, with several tags after one another and
> the last having the correct color?
Multiple font-tags (with the same color or generaly without any changed
parameter) does not change the the layout. So they can be used equal to
html-comments to split and hide suspicious keywords if the keyword
search is made on the raw body.
We've also seen that multiple spaces in suspicious phrases like
"To be removed"
or
"this is not spam"
are used to hide them.
The solution is to remove any html-tags and replace multiple spaces by a
single one before search for keywords and phrases.
Most of them is already implemented in SpamChk which everone can use as
an external test for declude. If someone has other suggestions or idea's
for content based spam detection we're happy to hear from it.
Markus
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
