Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Keywords...
  FAQ FAQ  Forum Search   Register Register  Login Login

Keywords...

 Post Reply Post Reply
Author
bpogue99 View Drop Down
Groupie
Groupie


Joined: 26 January 2005
Status: Offline
Points: 59
Post Options Post Options   Thanks (0) Thanks(0)   Quote bpogue99 Quote  Post ReplyReply Direct Link To This Post Topic: Keywords...
    Posted: 14 November 2003 at 7:29pm

Does the keyword filter only search headers and subject line? Or does it also search the body of the email? If it searches both, is there a method to only search the subject line for some items and the body for others?

Back to Top
Allan View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Allan Quote  Post ReplyReply Direct Link To This Post Posted: 16 November 2003 at 10:27am
It searches both....
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4065
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 16 November 2003 at 11:37pm

Bill,

The keyword filter checks the both the subject and the body of the email. Specific searches for either subject only or body only cannot be done.

Roberto F.
LogSat Software

Back to Top
Brian Lewis View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Brian Lewis Quote  Post ReplyReply Direct Link To This Post Posted: 17 November 2003 at 2:14pm

If it checks the body, why can't we code a REGEX expression that looks for attachment header info and then a .exe within 20 characters to the right or something to block .exe files??  I am not sure of what the exact code is on an attachment

 

example

------=_Mail_Part_1
Content-Type: image/jpeg;
 name="kraft paper4.exe"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="kraft paper4.exe"

 

Can't a REGEX expression be written to look for  'filename=' and then if the filename contains a .exe then the message is quarantined??

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4065
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 17 November 2003 at 10:41pm

Brian,

I did not go into more details on the previous response.

SpamFilter checks only the text portions of the body. It does not scan the binary attachments, and all the various attachment headers, as for ex. the Content-Disposition, Content-Type, and so on. Thus any checking on those values will not work, sorry.

Roberto F.
LogSat Software

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.125 seconds.