Title: Message
invalid tag would stop those but I can't seem to make a filter to work for it. Can someone provide some guidance or just simply send us the filter? Here's what I'm looking for in the header but it's not working:
 
X-IMAIL-SPAM-HTML-FEATURES\: (\*, Invalid Tag)
 
Thanks
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron Main
Sent: Tuesday, June 15, 2004 11:15 PM
To: [EMAIL PROTECTED]
Subject: [IMail Forum] Improvement to Spam Filtering

As time goes on, spammers are learning how to get around spam filters.  Currently of the email I receive, about 90% is spam.
 
If Imail removed all HTML tags <>, prior to performing the phrase checking, then this would remove at least 70% more spam than it does now.
 
Below is an example of a spam message I got that easily slipped past Imail's spam filters.
 
<html>
<body>
<loirdmnzrxlrbu><center>
<font face="verdana" size="+3">T<fcsquncenos>he o<dyhihamnztdzey>nly<nnqwcujzkzwlg> so<rjbhetusxzdldjt>lut<ixduzdpjlqpd>ion to P<zstpjxuynfdpi>en<icwzsywyzpqyx>is
E<knvqdkfjwtapp>nl<ovbzytguqwgroig>arge<pfaqfiemnjkwv>me<wfispyuhsxbfb>nt</font>
<br><br>
<font size="+2" face="arial"><b><sjyzugokjbncn><font color="red"><nfheplhjyqbfk>L<sihnuqkscbeyg>IM<xtghtftchffuu>I<xuriqjjhhvkoa>TE<hygvxowoqybtwgx>D
<jvqfryvyvfvf>OF<shcbtqsrvvt>FE<ivsuegcviknxv>R:</font></b> A<tlweimhchalzd>dd at l<unsetlqjqtu>east 3 I<crhhwpfitkp>NCH<sjnuyamwmimas>ES or ge<ttsvtktexxz>t y<vyurpbhcjhr>our mon<cqtvwsnfvtkp>ey
bac<ebwumcelkowb>k!
<br><br>
<p><zqdgjwxdrnataa><font face="verdana" size="+2"><b>-<kogaljocmpjwtap>--<yiryczvnhaegvo>></b> <A
href="">Click'>http://www.slknevn83.com/pp/atrack.php?id=50">C<qieabdegvmhojjd>l<eezpinuevtlouoy>ick He<kodzlpibmuvgg>re<diegpcmjcixxdde> To L<xxiftcubijvuvlb>ear<aitdbhpmitow>n M<nxjrkdatkofjhrd>or<cmuxshnmfhogv>e</a>
<b><<gvnhzjlaeejza>-<rswubmiuzlc>--</b></font>
<p>
<font face="arial">A<xkapwnojboyj>ls<nbeqwxvgnihu>o <ygjfaootezhyzb>che<cjyeurmatryekyp>ck ou<ufjbrrigdslyeb>t o<nqzkybbsbakqhzz>ur <b>*<xewiznfviwaxzk>br<bjlbsptpohol>an<oaiwrruufmy>d ne<qbdwoivwudz>w*</b>
pr<rqepssmzriyfso>od<jkjrlcrhaum>uc<zewmkxtkmfeag>t: <A href="">Penile'>http://www.slknevn83.com/pp/atrack.php?id=50">P<bhneepdceeq>e<xqusddsyhguuadm>ni<pwwzlqsjehwg>le
<arjsmjzaeybpvs>G<ktnyriiurmu>ro<gkarlnjbhrnivad>w<wobqchtzvawyl>t<ttmxbpbkahjwlg>h <agmvlpxltsnn>Pa<powhrizewzfq>t<amjwqohsmjp>c<kmystlstevyk>he<mgdrhylkjlikx>s<loyzmkanvbt></a></font><br>
<font face="arial" size="-1"><b>C<haokuhayrvax>om<trdxccfhhcbo>es <vgxcdkwwtaxa>wi<mtlrwemyiswtp>t<gxnszpapricbomw>h the 1<lzfxnymwanukdp>0<vbmlcdfuvvarzig>0% m<laudbearwsfez>o<ugeeswvofph>ne<dywkmayzxgyk>y
b<jkvlesvblaw>ac<vbezylevuamb>k wa<sprtrkabircwoi>rr<bywpimuslgyb>ant<dspdpxcdqwy>y <angjzlnehry>as w<wdypnmmyndkiqew>el<cgenzgnptxwt>l!</b></font>
<br><br>
<font size="-2"><a href="">No'>http://www.slknevn83.com/r/">N<vkotxvprvarepk>o m<zjkcxgsvfudshzy>or<kbtaioutzpqrged>e
of<ybrnxmficqhpfi>fe<ecnemappjhe>rs</a><wjylxlbxbnjvsq></font></body></html>
 
This could easily be filtered in it contained no HTML tags.
 
Just a thought...
 
Aaron

Reply via email to