Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Block pictures and HTML formats
  FAQ FAQ  Forum Search   Register Register  Login Login

Block pictures and HTML formats

 Post Reply Post Reply
Author
JohnDpatriot View Drop Down
Newbie
Newbie
Avatar

Joined: 19 September 2005
Location: Canada
Status: Offline
Points: 3
Post Options Post Options   Thanks (0) Thanks(0)   Quote JohnDpatriot Quote  Post ReplyReply Direct Link To This Post Topic: Block pictures and HTML formats
    Posted: 19 September 2005 at 11:32am

Lately I have been receiving a lot of spam formated as below.

M
C
U
L
P
C
V
A
V
X
e
I
l
e
r
e
A
m
I
a
r
A
t
v
o
l
L
b
A
n
i
L
r
i
p
e
I
i
G
a
d
I
a
t
e
b
U
e
R
x
ia
S
m
ra
cia
rex
M
n
A

$1




$3

$3

.21




.75

.33
 
 
How do I block these????
 
John,
 
In Plain text looks like.
 

 

 

M

C

U

L

P

C

V

A

V

Xe

I

l

e

r

e

A

m

I

ar

A

t

v

o

l

L

b

A

ni

L

r

i

p

e

I

i

G

ad

I

a

t

e

b

U

e

R

xia

S

m

ra

cia

rex

M

n

A

$1

 

 

 

$3

$3

.21

 

 

 

.75

.33

http://www.perapestim.com

 

Back to Top
Harvey View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Harvey Quote  Post ReplyReply Direct Link To This Post Posted: 19 September 2005 at 1:13pm
Try putting  perapestim.com in your keywords filter.
 
perapestim::Honeypot
 
Back to Top
Alan View Drop Down
Groupie
Groupie


Joined: 06 May 2005
Location: United States
Status: Offline
Points: 43
Post Options Post Options   Thanks (0) Thanks(0)   Quote Alan Quote  Post ReplyReply Direct Link To This Post Posted: 19 September 2005 at 1:26pm
You can try adding

<div>

to your keyword blacklist.
It appears that is what the spammer is using.
Back to Top
johndpatriot View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote johndpatriot Quote  Post ReplyReply Direct Link To This Post Posted: 21 September 2005 at 9:08am

the <div> idea is good expect that alot of email we receive is in HTML format nowadays so this will cause issues. 

 

I was hoping we could find away of getting spam filter to read the file as it would appear to the end user.  then scan for keywords.  Here is th HTML for the email if that helps.

 

John,

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2180" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff><B>From:</B> Olivia Semien
[semv@res-radio.net]<BR><B>Sent:</B> Tuesday September 20, 2005 6:02
PM<BR><B>To:</B> John deBlieck<BR><B>Subject:</B> Re: Phadrmaceutical V ery
Useful<BR>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Courier>
<DIV style="FLOAT: left">X<BR>C<BR>M<BR>A<BR>L<BR >U<BR>P<BR>V<BR>C<BR>V</DIV> ;
<DIV style="FLOAT: left">a<BR>e<BR>e<BR>m<BR>e<BR >l<BR>r<BR>I<BR>I<BR>A</DIV> ;
<DIV style="FLOAT: left">n<BR>l<BR>r<BR>b<BR>v<BR >t<BR>o<BR>A<BR>A<BR>L</DIV> ;
<DIV style="FLOAT: left">a<BR>e<BR>i<BR>i<BR>i<BR >r<BR>p<BR>G<BR>L<BR>I</DIV> ;
<DIV style="FLOAT: left">x<BR>b<BR>d<BR>e<BR>t<BR >a<BR>e<BR>R<BR>I<BR>U</DIV> ;
<DIV
style="FLOAT: left"><BR>rex<BR>ia<BR>n<BR>ra< ;BR>m<BR>cia<BR>A<BR>S<BR>M</D IV>
<DIV style="FLOAT: left"><BR><BR><BR><BR><BR>& lt;BR><BR>$3<BR>$1<BR>$3</DIV>
<DIV style="FLOAT: left"><BR><BR><BR><BR><BR>& lt;BR><BR>.33<BR>.21<BR>.75</DIV>
<DIV style="CLEAR: both">&nbsp;</DIV>
<DIV><A
href=" http://www.someseoul.com">http://www.someseoul.com</A& gt;</DIV></FONT></DIV></BODY></HT ML>

 

Back to Top
Marcus View Drop Down
Newbie
Newbie


Joined: 25 July 2005
Location: United States
Status: Offline
Points: 21
Post Options Post Options   Thanks (0) Thanks(0)   Quote Marcus Quote  Post ReplyReply Direct Link To This Post Posted: 21 September 2005 at 10:55am

I generally target these by keywording the site referenced, this way I block recurrances of this message and anything else referencing this site.  In this case:

(\bsomeseoul\.com\b)

would block any references to this site in future emails.  Works good for me.

Hint - try and target stuff in the HTML - cuts down on the false-positives.

Marcus



Edited by Marcus
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.078 seconds.