[Mimedefang] How to trap this spam
WBrown at e1b.org
WBrown at e1b.org
Wed Dec 31 09:30:56 EST 2003
mimedefang-bounces at lists.roaringpenguin.com wrote on 12/30/2003 05:14:26
PM:
> Hi all
>
> We've been getting a lot of spam getting through our defences
> (mimedefang 2.39 SpamAssassin 2.70-cvs Razor2) which looks like the
> attached. I quarantined it by trapping stuff with redundant html,
> but also picked up a lot of valid (?) email as well. Has anyone got
> any ideas about trapping this stuff without too many false positives?
>
I dont think trapping just because a message has redundent test and HTML
parts is a good test. Most good mail programs will allow sending both
for compatability with plain text mail systems. (IMNSHO all mail should be
text!!) You're catching anything sent by one of those apps.
I'm working on getting permission from Management to strip redundent HTML
parts. If the plain text part of a message like that comes through, the
most offensive thing in it is the word "uterus". The only commercial
content in your example was the image loaded in the HTML part.
Have many of you been successful in convincing management to allow
stippping redundent HTML parts?
More information about the MIMEDefang
mailing list