On Saturday 08 February 2003 07:42 pm, FemmeFatale wrote:
> At 01:27 PM 2/8/2003 -0500, you wrote:
> ><snipper>
> >
> >How I deal with the security risks of html mail is with filters that
> >whitelist
> >people I trust.  If I receive an html e-mail from somebody not on my
> > trusted list, it gets sent to a different folder that displays everything
> > as plain text, so it can be examined without rendering the html.  If the
> > sender is on the list, the message is forwarded to my inbox.
> >--
> >Greg
>
> Hm... could you share how you do that?  onlist or off pls. Ty

KMail has the ability to create quite advanced filters.  

You configure them from Settings ==> Configure Filters.

The rule I use is a match all rule.  The first criteria is if the body of the 
message contains the string "<html>", and the next rules are basically a list 
of the from addresses that contain the addresses I want to receive html mail 
from.  These are addresses that I trust.  I basically set the rule to say 
that if the message body contains "<html>", and does not contain 
[EMAIL PROTECTED], and does not contain [EMAIL PROTECTED], move to folder 
html-mail.

If the message meets all the rules, it is html and it does not contain any of 
the addresses I specify it gets moved to the html folder, if not it goes on 
to the next filter or to the inbox if you don't have any more..

Of course, I have created a folder called html-mail and set it's preferences 
to display all messages as text.  Now I can review the message without fear 
of someone that has created a malformed html string crashing my box.  If it 
looks like I can trust it, I'll manually move it back to my inbox so I can 
view the rendered document as it is intended to be displayed. If it looks 
like I cannot trust it, I delete it.

I have another filter that has rules that deletes any message that contains 
the words "p*nis enlargement", viagra, "dvd burning," and a few other well 
known phrases used by spammers  -- basically a simple spam filter that cuts a 
lot of crap out of my inbox.

Another thing I do is create a rule where every message that has the string 
"[newbie]" in the subject line is moved to a folder just for this list.  Also 
one for Cooker and Expert, as well as the myriad of other lists I subscribe 
to.  Keeps the inbox nice and tight.

I hope this is clear as I wrote this very quickly.
-- 
Greg

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to