SpamChk is an external test for Declude Junkmail.
You
can download it from www.riedmann.it/spamchk
Some
weeks ago I've posted also an updated ini-file to this
list.
Markus
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Gable
Sent: Tuesday, June 24, 2003 9:27 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] V_IAGRA won't dieSorry for my ignorance, but what is SpamChk? Declude couldn't identify the suspicious keywords despite them being in my FILTER file.Mike-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Markus Gufler
Sent: Tuesday, June 24, 2003 11:59 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] V_IAGRA won't dieMike,Most messages processed by our server are written in european languages. (German, Italian, French, ...) We see a lot of this ISO-.... subject lines.This is a base64 encoded subject line. (the "?B" after the ISO-id means base64-encoded)SpamChk can identify suspicious keywords that are encoded like this.BTW: Even if some subscribers of this lists has whitelisted anyway messages from this list, it's not a good idea to put such a keyword in the subject. I bet not all subscribers has recieved your message.Markus-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Gable
Sent: Tuesday, June 24, 2003 7:21 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] VIAGRA won't dieApparently, this means "Generic Viagra" as revealed in the Declude Log file:=?iso-8859-1?B?R2VuZXJpYyBWaWFncmE=?=What can you do about obfuscated subjects using ISO character sets? I was thinking of filtering them based on partial string, like this:SUBJECT 30 CONTAINS =?iso-8859Is it safe to filter this? In other words, would a legitimate or casual sender ever use such a method to display a subject? Is there a list of ISO charcter sets that can be filtered?Thanks!Mike
