on as no legit mailer should be hiding
urls like that.
Mike
- Original Message -
From: Madscientist [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 19, 2002 8:47 PM
Subject: RE: [Declude.JunkMail] Wordfilter bypassed
|
| However, that's the way spam control is heading
on.
|
| This should be very easy to filter on as no legit mailer
| should be hiding urls like that.
|
| Mike
|
|
|
|
|
|
| - Original Message -
| From: Madscientist [EMAIL PROTECTED]
| To: [EMAIL PROTECTED]
| Sent: Tuesday, November 19, 2002 8:47 PM
| Subject: RE: [Declude.JunkMail] Wordfilter
Title: Message
We have seen quite
a lot. It is happening more and more. If HTML comments could be
ignored it would be a great addition. I wonder what would be the downfall
of the idea?
I also think
another filter that can be considered is the routing type filter. I don't
know if bad
The sneaky buggers are at it again. I've been getting more and more emails
that don't fail any tests at all, but should be caught as spam due to
multiple wordfilter hits. I had a look at the message (HTML) source, and
found this:
Hum!--nnbvmx--an Gr!--d--owth Hor!--fjkg--mone
I guess one way to combat this is if the Country filter is additive. For
example the weight of each country detected is added to the total
weight. Does the filter do this?
Yes, it does. :)
-Scott
---
[This E-mail was scanned for viruses by Declude Virus
Title: Nachricht
If you
can wait for some weeks we can provide an external test-program that make some
content-based tests.
At the
moment we have ready the first tests wich tries to identify things like
HTML-only mails, subject with spaces (yes, the same as Decludes
spamheaders-test) and
: [Declude.JunkMail] Wordfilter bypassed
|
|
|
| The sneaky buggers are at it again. I've been getting more and more
| emails
| that don't fail any tests at all, but should be caught as
| spam due to
| multiple wordfilter hits. I had a look at the message (HTML)
| source, and
| found this:
|
| Hum
We attempted implementing a test that counts the number of html comments
and found that it was impractical as it consistently captured a large
number of legitimate services. (Scott, you indicated that it might catch
some - our experience has been that it captures so many we had to drop
it.) I
R.,
Tuesday, November 19, 2002 you wrote:
RSP I can understand an HTML E-mail having one or two comments in it,
RSP but 10 or 20 is just a waste of bandwidth. That is information
RSP the recipient will never see.
Lots of the content management systems are heavily commented so I
see a
Lots of the content management systems are heavily commented so I
see a lot of comments in html messages to subscribers.
However, they are not commented between words but that's a
difficult parse I think.
Aha... that could be the key!
A spammer will use something like
|
| However, that's the way spam control is heading. As more and
| more people
| get fed up with spam, more and more of the bozos that are
| doing things the
| wrong way will need to fix their problems.
|
| I can understand an HTML E-mail having one or two comments in
| it, but 10 or
| 20
]
| Subject: Re: [Declude.JunkMail] Wordfilter bypassed
|
|
|
| Lots of the content management systems are heavily
| commented so I
| see a lot of comments in html messages to subscribers.
|
| However, they are not commented between words but that's a
| difficult parse I
12 matches
Mail list logo
