Hi;
We are getting a
lot of spam lately that are being caught primarily with IP4r tests as well as
the likes of spamdomain or helobogus .. but not content filters. This is,
as discussed before, because a large amount of text (almost chapter 1 of Gone
with the Wind :)) is put at the top of the email.
In checking the
content.. this is the only thing I see before the long text.. could this be used
as a filter?
====================
This is a
multi-part message in MIME format.
------=_NextPart_000_0951_7DF4E03D.3CA8D29D
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
====================
& then before
the actual spam:
====================
------=_NextPart_000_0951_7DF4E03D.3CA8D29D
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
====================
Does anyone
know if the first part: Content-Transfer-Encoding: 7bit can be used a
filter? Pro? Con?
There has to
be something that makes the body of email not show such a long text.. it is not
a white font .. what is it?
Regards,
Kami
