[Mimedefang] Test for html tag <DEFANG_

Mon Jan 19 02:24:20 EST 2004

Does this look like original or is it defanged ?

If so it must be done by "Anomy::HTMLCleaner" .   Gee, one can look pretty
stupid pretty quick when not thinking straight....

      Thanks,
            Steve

<html>
<body>
<a href="http://otjwxxdoty.whokz.info/alpha/?34dz5z"><img
DEFANGED_src="http://terra.es/personal5/bolik25/aig.gif">
</a>

<a href="http://suunpiblym.whokz.info/alpha/o.html"><IMG
DEFANGED_SRC="http://terra.es/personal5/bolik25/o.gif"
border=0></a><DEFANGED_k1bsfdz2jzzz><DEFANGED_k9j9v3ledh3sy><DEFANGED_kh8jp6h30w3s6a></td></tr></table><DEFANGED_kfvp61b
3ihs7j><DEFANGED_kggrccz2mwcht6><DEFANGED_kd6fu3s3dl6h8>
peqmk yvzwu qxify tfayy cssov jtorz pfjie wdlei
xspym uxmqwxmqkm xangj tyhsd qnawt allcj wggdr rjzqu rrmct
kznqi fflps yvtad swyou krojy cyddi mrmdd qpinh idaqx qlkwt
ibieb jxosw vnaaq ziozw rvwov vhfkk
vikxp vsrit bkxmu wjwon
ziwtg saayv
xvmke cdlkc uuhzx ohykx pcooh xjtxz
fyhdh ocgdx vwtfl mhsff
</body>
</html>

-----------------------------------
Steven Ellison,
MIS Department, Hardy Wine Company
Reynella, South Australia, 5161
-----------------------------------

             Alexander Dalloz                                              
             <alexander.dalloz                                             
             @uni-bielefeld.de                                          To 
             >                         mimedefang at lists.roaringpenguin.com 
             Sent by:                                                   cc 
             mimedefang-bounce                                             
             s at lists.roaringpe                                     Subject 
             nguin.com                 Re: [Mimedefang] Test for html tag  
                                       <DEFANG_                            

             19/01/2004 05:42                                              
             PM                                                            

             Please respond to                                             
             mimedefang at lists.                                             
             roaringpenguin.co                                             
                     m                                                     

Am Mo, den 19.01.2004 schrieb Steven.Ellison at hardywines.com.au um 07:13:
>
>
> Hi all,
>      I have noticed a lt of spam now getting through using html tags
> <DEFANG_......      which is obviously spam.  They appear to be using
these
> tags to break up text to make it difficult to check.  Maybe I missed the
> discussion
> on this in the past but how do we test for this.  I presume we do this in
> Spam Assasin
> but I don't understand how.   A normal body test does not seem to pick it
> up so I am
> assuming I need to add it to a html test.
>
>       All help appreciated,
>
>                   Regards,
>                         Steven Ellison

Are you sure the TAGS are in the original mail and not replacements by
MimeDefang because
you configured it to defang HTML messages? I suspect the last.

Alexander

P.S. Please do not hijack foreign threads as it breaks threaded view. Your
mail arises now as an
answer to "Spam graphs by domain" which it is not. Thanks.

--
Alexander Dalloz | Enger, Germany
PGP key valid: made 13.07.1999
PGP fingerprint: 2307 88FD 2D41 038E 7416  14CD E197 6E88 ED69 5653
(See attached file: signature.asc)
_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
MIMEDefang at lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/octet-stream
Size: 196 bytes
Desc: not available
URL: <https://lists.mimedefang.org/pipermail/mimedefang_lists.mimedefang.org/attachments/20040119/d508f2e2/attachment.obj>