I was looking at your headers and not those of this message because you
didn't share those. That also wouldn't have any effect so don't get
caught up on that.
I believe that the Properties > Details > Message Source option
in Outlook Express does not MIME decode the source, so it would be
evident there. I'm not clear on what version of Outlook that you are
running and this might be different. Unfortunately Microsoft has
decided to mask all sorts of client and server information from their
messages, making things look like they originate from the server and
without indications of the client or even a Message-ID. You should be
able to test your client's capabilities and determine if it interprets
MIME encoding. The most common element that you would see in HTML
E-mail would be =3D. If you verify that it doesn't interpret, then
this would certainly look to be very suspicious and suggestive of a
bug. I wouldn't jump to that conclusion though.
If you need to regularly do review with your mail client, I strongly
advise that you switch to something like Netscape or Thunderbird (new
Mozilla E-mail client). Viewing the plain text source is just a matter
of Ctrl.+U. Firefox/Thunderbird is poised to take substantial
marketshare from Microsoft for the first time since the browser wars
began. I'll be switching to Firefox as soon as they go from preview
release to actual release, which should be any day now. To each their
own of course, but I couldn't deal with doing this and using Outlook.
Matt
Goran Jovanovic wrote:
Matt,
The view source is from my Outlook client so not sure if it really is
"true" source or not.
Is there anything in the headers that would indicate that this was sent
via an Exchange Web mail? I have the headers but do not really see
anything indicating what sent it. There is no X-Mailer etc.
Any thoughts?
Thanx
Goran Jovanovic
The LAN Shoppe
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Tuesday, October 12, 2004 11:04 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] How did this trigger my filter?
I would make sure that your view source is the true source and not an
interpreted source. It appears that you are using Exchange Web mail,
and I wouldn't be surprised to see this behavior in a Web mailer.
This
is almost guaranteed to be the case here.
Matt
Goran Jovanovic wrote:
Hi,
I have the following line in a filter:
BODY 20 CONTAINS You=92ll
It triggered on an HTML e-mail:
10/06/2004 19:20:02 Q7d8a0030012efa97 Triggered BODY CONTAINS filter
WORDMASK on You=92ll [weight->20; you=92ll find marketing tools ].
Now in the HTML e-mail there is only one instance of find marketing
tools and it looks like (from View Source)
<p>Partnerweb gives all Extreme Networks authorized partners (ESP,
EASP
and distributors) 24/7 access to a password protected web site that
delivers the tools and resources needed to develop and close
opportunities. In addition to information on training and
certification
programs, product updates, and Extreme promotional campaigns, you'll
find marketing tools that give you the sales edge, such as vertical
market information designed to meet the unique needs of education,
healthcare and government customers.
So my question is how did the ' get interpreted as an =92?
Thanx
Goran Jovanovic
The LAN Shoppe
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
--
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
--
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================
|
