RE: [Declude.JunkMail] How did this trigger my filter?

[Goran Jovanovic]

Matt,   My e-mail ends up in Exchange and I am using Outlook 2003 (now with SP1). I am not sure how much Exchange/Outlook hides pertinent info when you do a View Source.   I guess for me for your solution to work I would have to use Firefox or whatever using IMAP4 so that I can check out the e-mails in Exchange. It might be something that I will have to do??            Goran Jovanovic      The LAN Shoppe     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, October 13, 2004 12:28 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] How did this trigger my filter?   I was looking at your headers and not those of this message because you didn't share those.  That also wouldn't have any effect so don't get caught up on that. I believe that the Properties > Details > Message Source option  in Outlook Express does not MIME decode the source, so it would be evident there.  I'm not clear on what version of Outlook that you are running and this might be different.  Unfortunately Microsoft has decided to mask all sorts of client and server information from their messages, making things look like they originate from the server and without indications of the client or even a Message-ID.  You should be able to test your client's capabilities and determine if it interprets MIME encoding.  The most common element that you would see in HTML E-mail would be =3D.  If you verify that it doesn't interpret, then this would certainly look to be very suspicious and suggestive of a bug.  I wouldn't jump to that conclusion though. If you need to regularly do review with your mail client, I strongly advise that you switch to something like Netscape or Thunderbird (new Mozilla E-mail client).  Viewing the plain text source is just a matter of Ctrl.+U.  Firefox/Thunderbird is poised to take substantial marketshare from Microsoft for the first time since the browser wars began.  I'll be switching to Firefox as soon as they go from preview release to actual release, which should be any day now.  To each their own of course, but I couldn't deal with doing this and using Outlook. Matt Goran Jovanovic wrote: Matt,   The view source is from my Outlook client so not sure if it really is "true" source or not.   Is there anything in the headers that would indicate that this was sent via an Exchange Web mail? I have the headers but do not really see anything indicating what sent it. There is no X-Mailer etc.   Any thoughts? Thanx        Goran Jovanovic      The LAN Shoppe       -----Original Message-----From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-[EMAIL PROTECTED]] On Behalf Of MattSent: Tuesday, October 12, 2004 11:04 PMTo: [EMAIL PROTECTED]Subject: Re: [Declude.JunkMail] How did this trigger my filter? I would make sure that your view source is the true source and not aninterpreted source.  It appears that you are using Exchange Web mail,and I wouldn't be surprised to see this behavior in a Web mailer.    This  is almost guaranteed to be the case here. Matt   Goran Jovanovic wrote:     Hi, I have the following line in a filter: BODY     20     CONTAINS     You=92ll It triggered on an HTML e-mail: 10/06/2004 19:20:02 Q7d8a0030012efa97 Triggered BODY CONTAINS filterWORDMASK on You=92ll [weight->20; you=92ll find marketing tools ]. Now in the HTML e-mail there is only one instance of find marketingtools and it looks like (from View Source) <p>Partnerweb gives all Extreme Networks authorized partners (ESP,      EASP  and distributors) 24/7 access to a password protected web site thatdelivers the tools and resources needed to develop and closeopportunities. In addition to information on training and      certification  programs, product updates, and Extreme promotional campaigns, you'llfind marketing tools that give you the sales edge, such as verticalmarket information designed to meet the unique needs of education,healthcare and government customers. So my question is how did the ' get interpreted as an =92? Thanx      Goran Jovanovic    The LAN Shoppe ---[This E-mail was scanned for viruses by Declude Virus      (http://www.declude.com)]    ---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.          --=====================================================MailPure custom filters for Declude JunkMail Pro.http://www.mailpure.com/software/===================================================== ---[This E-mail was scanned for viruses by Declude Virus(http://www.declude.com)] ---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.      ---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] ---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.    -- =====================================================MailPure custom filters for Declude JunkMail Pro.http://www.mailpure.com/software/=====================================================

<<image001.gif>>