There was some talk a while ago about blocking the tags used to make it difficult to parse text in spam.
That depends:
this stuff:
<!--r7-->ou th<!--c6-->ousands o<!--sE-->ver the l<!--S2-->ife of your lo<!--J2-->an! W<!--cJ-->hat are you wai<!--dR-->ting for? <!--x2--><br><br><!--TY--><A href="http://mtggreat1.com/4/index.asp?RefID=588897";> <font size="5">Vi<!--Ow-->sit N<!--OC-->ow</font></a></font><!--iw--> </td><!--ZP--></tr><br></table><br><!--vz-->
This is easy to catch. In the latest beta, the COMMENTS test catches this, and the standard filters work on this. That's because these are actual comments (the first thing spammers tried).
Scott suggested this would be impracticle since any number of random tags could be invented and the browser must handle them cleanly so scanning for each one is useless.
Correct. After standard comments, spammers next tried "<!b>" and similar made-up comment-like tags. Then, they started using fake tags such as "<blah>". Now they are also using real tags ("via<b></B>gra", for example), which are even more difficult to catch.
However it would be possible to add a text comparison function that examines only the text outside of the <>'s This way you could seperate your rules into those which can work on the entire html body.
That's already done in the latest beta. If you have a filter for "viagra", it will catch "via<b></b>gra".
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
