[Mimedefang] How to trap this spam

WBrown at e1b.org WBrown at e1b.org
Wed Dec 31 09:30:56 EST 2003


mimedefang-bounces at lists.roaringpenguin.com wrote on 12/30/2003 05:14:26 
PM:

> Hi all
> 
> We've been getting a lot of spam getting through our defences 
> (mimedefang 2.39 SpamAssassin 2.70-cvs Razor2) which looks like the 
> attached. I quarantined it by trapping stuff with redundant html, 
> but also picked up a lot of valid (?) email as well. Has anyone got 
> any ideas about trapping this stuff without too many false positives?
> 
I dont think trapping just because a message has redundent test and HTML 
parts is a good test.  Most good mail programs will allow  sending both 
for compatability with plain text mail systems. (IMNSHO all mail should be 
text!!) You're catching anything sent by one of those apps.

I'm working on getting permission from Management to strip redundent HTML 
parts.  If the plain text part of a message like that comes through, the 
most offensive thing in it is the word "uterus".  The only commercial 
content in your example was the image loaded in the HTML part.

Have many of you been successful in convincing management to allow 
stippping redundent HTML parts?



More information about the MIMEDefang mailing list