Yea I understand that but I am catching words like p*nis and c*nt that
should have a heavy weight and for some reason it seems to be only PDF file
attachments. Just thought it would be possible to skip that portion of the
body due to the formating.

Rick Davidson
National Systems Manager
North American Title Group
-
----- Original Message ----- 
From: "Colbeck, Andrew" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, April 12, 2004 2:05 PM
Subject: RE: [Declude.JunkMail] Words found in encoded file atachments


> Rick, no, the BODY text filtering searches everywhere, including inside
> binary attachments.
>
> Your best bet is to assign those nasty words with very little weight,
don't
> use very short words, and/or try to match a phrase instead, or use
trailing
> punctuation.
>
> For example, I've found that although they are darn common in spam, I
can't
> use these with a weight any higher than 1:
>
> tit
> t1t
> mlm
> m1m
> hgh
>
> because of their false positives in binary attachments and BASE64
encodings
> of attachments.
>
> Andrew 8)
>
> -----Original Message-----
> From: Rick Davidson [mailto:[EMAIL PROTECTED]
> Sent: Monday, April 12, 2004 10:35 AM
> To: [EMAIL PROTECTED]
> Subject: [Declude.JunkMail] Words found in encoded file atachments
>
>
> Is it possible to exclude the filters from being triggered when finding
> words in the file attachment encoding in the message body? I have been
> getting some false positives on some nasty words that were arbitrarily
> formed in the encoding segments
>
> Rick Davidson
> National Systems Manager
> North American Title Group
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to