I might point out that as we build filters for this stuff we've noticed that the spammers are frequently "greeking" the ADV to make it difficult to filter... They place it in odd spots in the message, dress it up with parenthesis, colons, dashes, and other junk... Anything they can do to make it difficult to filter accurately. Much the same way they greek web links - but within the limits of having the ADV in there somewhere. It seems that the ADV is now being used in much the same way the old "complies with regulation...xyz" has been - pretending toward legitimacy.
_M | -----Original Message----- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of R. | Scott Perry | Sent: Thursday, April 04, 2002 1:20 PM | To: [EMAIL PROTECTED] | Subject: Re: [IMail Forum] Spam Mail Bouncer for IMail | | | | >We receive very few, if any, spams that have ADV: in them... | | Our spamtrap shows that of the last 3000 or so spams we | received, "ADV:" | appeared about 113 times. That's 3.4% of the spam. It may | increase to | some degree, as spammers want to minimize their risk. But, | most spammers | don't care about the risk (they are often already breaking | other laws), and | would prefer to make more money by not having the "ADV:" in there. | | The good news, though, is that the ADV: in the subject seems | to have few, | if any, false positives. | | -Scott | --- | Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for | IMail. http://www.declude.com | | --- | [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
