[Mimedefang] Looking for an example of obfuscated HTML
Steven.Ellison at hardywines.com.au
Steven.Ellison at hardywines.com.au
Tue Aug 5 21:18:01 EDT 2003
OK, I thought the suggestion was to strip the html only for SPAM checking
and not to change the email for
delivery ? Did I get the wrong interpretation ;-(
Steven Ellison
Steven Ellison,
MIS Department, Hardy Wine Company
Reynella, South Australia, 5161
For Hardy Wine and Constellation Employees Only:
The Hardy Wine Corporate Intranet Web Site
http://corporate.hardywines.com.au/
The Email and Internet usage Policy
http://corporate.hardywines.com.au/EMAIL_POLICY.pdf.
mimedefang-admin at lists.roaringpenguin.com wrote on 06/08/2003 07:23:32 AM:
> On Tue, 5 Aug 2003, Kevin A. McGrail wrote:
>
> > That's a dastardly piece of spam. Though I think it should be easy to
do a
> > strip html routine and then parse the email for SpamAssassin.
>
> Stripping out the HTML is easy, but the result is essentially a
> transposition cipher of the original "plaintext". That's why it's so
> dastardly.
>
> > There could also be a diff comparison added to it to check that the
html and
> > the plain text are "similar-esque" so that you don't get someone
sending
> > bogus text/plain and spam text/html mime messages.
>
> I say just bounce anything containing HTML. That drastically reduces
> the options available to spammers.
>
> In fact, my MIMEDefang filter *does* bounce any HTML messages unless
> one of our e-mail addresses appears in the To: or Cc: line, or comes
from
> one of the mailing lists I'm on. It's quite effective. It probably
does
> bounce the odd legitimate mail, but not too often.
>
> Will banning HTML mail catch on? I doubt it. I've had complaints that
> the MIMEDefang list bounces HTML, and people trying to post there should
> know better. :-(
>
> --
> David.
> _______________________________________________
> MIMEDefang mailing list
> MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
More information about the MIMEDefang
mailing list