And I'm seeing more and more of these messages with the text section crafted cleverly to try and avoid blocks, and with more and more of them with these text sections large enough to defeat scanning of the message proper by the usual battery of content-based tests. I think Kami pointed this out recently, and I see that this is rapidly getting worse; we're going to need a new way to approach these, I think.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Smart Business Lists Sent: Sunday, 12 October 2003 5:44 AM To: Jonas Subject: Re: [Declude.JunkMail] How does this spam trick work Jonas, Saturday, October 11, 2003 you wrote: J> I assume that they must do this to try to avoid content filtering. I J> was never aware of that they could fake messages like this. I think you are viewing a message that is in multipart mime. In web mail you are viewing the html part of the message. In Imail client you are viewing the text part. These do not have to be the same and frequently the text part will be something like "your client doesn't support html messages." Well crafted messages will have a text part of the message customized for those who "see" only text and vice versa. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
