Title: Message
|
IMail 8.11 does have word
normalization. I guess they need to give it some of that stuff that the
spam was selling to make it work better :)
Scott
Wilkins
IT Manager
Tedford
Insurance
Phone: 918.299.2345
Direct: 918.296.2913
Fax:
918.296.3346
invalid tag would stop those but I can't
seem to make a filter to work for it. Can someone provide some guidance or
just simply send us the filter? Here's what I'm looking for in the
header but it's not working:
X-IMAIL-SPAM-HTML-FEATURES\: (\*, Invalid
Tag)
Thanks
As time goes on, spammers are learning how to get around spam
filters. Currently of the email I receive, about 90% is spam.
If Imail removed all HTML tags <>, prior to performing the phrase
checking, then this would remove at least 70% more spam than it does
now.
Below is an example of a spam message I got that easily slipped past
Imail's spam filters.
<html> <body> <loirdmnzrxlrbu><center> <font
face="verdana" size="+3">T<fcsquncenos>he
o<dyhihamnztdzey>nly<nnqwcujzkzwlg>
so<rjbhetusxzdldjt>lut<ixduzdpjlqpd>ion to
P<zstpjxuynfdpi>en<icwzsywyzpqyx>is E<knvqdkfjwtapp>nl<ovbzytguqwgroig>arge<pfaqfiemnjkwv>me<wfispyuhsxbfb>nt</font> <br><br> <font
size="+2" face="arial"><b><sjyzugokjbncn><font
color="red"><nfheplhjyqbfk>L<sihnuqkscbeyg>IM<xtghtftchffuu>I<xuriqjjhhvkoa>TE<hygvxowoqybtwgx>D <jvqfryvyvfvf>OF<shcbtqsrvvt>FE<ivsuegcviknxv>R:</font></b>
A<tlweimhchalzd>dd at l<unsetlqjqtu>east 3
I<crhhwpfitkp>NCH<sjnuyamwmimas>ES or ge<ttsvtktexxz>t
y<vyurpbhcjhr>our
mon<cqtvwsnfvtkp>ey bac<ebwumcelkowb>k! <br><br> <p><zqdgjwxdrnataa><font
face="verdana"
size="+2"><b>-<kogaljocmpjwtap>--<yiryczvnhaegvo>></b>
<A href="">C lick'>http://www.slknevn83.com/pp/atrack.php?id=50">C<qieabdegvmhojjd>l<eezpinuevtlouoy>ick
He<kodzlpibmuvgg>re<diegpcmjcixxdde> To
L<xxiftcubijvuvlb>ear<aitdbhpmitow>n
M<nxjrkdatkofjhrd>or<cmuxshnmfhogv>e</a>
<b><<gvnhzjlaeejza>-<rswubmiuzlc>--</b></font>
<p>
<font
face="arial">A<xkapwnojboyj>ls<nbeqwxvgnihu>o
<ygjfaootezhyzb>che<cjyeurmatryekyp>ck ou<ufjbrrigdslyeb>t
o<nqzkybbsbakqhzz>ur
<b>*<xewiznfviwaxzk>br<bjlbsptpohol>an<oaiwrruufmy>d
ne<qbdwoivwudz>w*</b>
pr<rqepssmzriyfso>od<jkjrlcrhaum>uc<zewmkxtkmfeag>t:
<A href="">Penile'>http://www.slknevn83.com/pp/atrack.php?id=50">P<bhneepdceeq>e<xqusddsyhguuadm>ni<pwwzlqsjehwg>le
<arjsmjzaeybpvs>G<ktnyriiurmu>ro<gkarlnjbhrnivad>w<wobqchtzvawyl>t<ttmxbpbkahjwlg>h
<agmvlpxltsnn>Pa<powhrizewzfq>t<amjwqohsmjp>c<kmystlstevyk>he<mgdrhylkjlikx>s<loyzmkanvbt></a></font><br>
<font
face="arial"
size="-1"><b>C<haokuhayrvax>om<trdxccfhhcbo>es
<vgxcdkwwtaxa>wi<mtlrwemyiswtp>t<gxnszpapricbomw>h the
1<lzfxnymwanukdp>0<vbmlcdfuvvarzig>0%
m<laudbearwsfez>o<ugeeswvofph>ne<dywkmayzxgyk>y
b<jkvlesvblaw>ac<vbezylevuamb>k
wa<sprtrkabircwoi>rr<bywpimuslgyb>ant<dspdpxcdqwy>y
<angjzlnehry>as
w<wdypnmmyndkiqew>el<cgenzgnptxwt>l!</b></font>
<br><br>
<font
size="-2"><a href="">No'>http://www.slknevn83.com/r/">N<vkotxvprvarepk>o
m<zjkcxgsvfudshzy>or<kbtaioutzpqrged>e
of<ybrnxmficqhpfi>fe<ecnemappjhe>rs</a><wjylxlbxbnjvsq></font></body></html>
This could easily be filtered in it contained no HTML tags.
Just a thought...
Aaron
|
