Spam Filter ISP Forums : Catching Floating DIV spam https://www.logsat.com/spamfilter/forums/ Wed, 17 Jun 2026 06:34:30 +0000 Wed, 27 Sep 2006 05:56:28 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=5668 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[Catching Floating DIV spam : hello can I have a copy of the...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=9049&title=catching-floating-div-spam#9049 Author: pierfish
Subject: 5668
Posted: 27 September 2006 at 5:56am

hello can I have a copy of the regex please ?

 

thanks

]]> Wed, 27 Sep 2006 05:56:28 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=9049&title=catching-floating-div-spam#9049 <![CDATA[Catching Floating DIV spam : Hi Stephen, Just got your PM..Thanks. WOW....how...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=9008&title=catching-floating-div-spam#9008 Author: StevenJohns
Subject: 5668
Posted: 19 September 2006 at 3:04pm

Hi Stephen,

 

Just got your PM..Thanks.

 

WOW....how many keyword filters !?!?!

 

and yes...I would like to have a look at more filters, if you don't mind. I will PM you my email address, just in case it's easier that way.

 

Cheers

]]> Tue, 19 Sep 2006 15:04:26 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=9008&title=catching-floating-div-spam#9008 <![CDATA[Catching Floating DIV spam : Hi StevenJohns, I just sent you...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=9007&title=catching-floating-div-spam#9007 Author: sgeorge
Subject: 5668
Posted: 19 September 2006 at 2:58pm

Hi StevenJohns, I just sent you the regex that I've been using for these particular techniques.  Thanks for being so patient... I've been MIA from the forums for a weeks.

In terms of filters & metrics, I'm a weird example.  I use 203 non-RegEx filters; I also use 97 RegEx filters.  In all, I would estimate at any given time that I check our quarantine, about 40 of all of these filters has blocked one or more messages in our quarantine.

Stephen
]]> Tue, 19 Sep 2006 14:58:55 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=9007&title=catching-floating-div-spam#9007 <![CDATA[Catching Floating DIV spam : SGeorge, Hello, Is there any...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8874&title=catching-floating-div-spam#8874 Author: StevenJohns
Subject: 5668
Posted: 31 August 2006 at 5:32am

SGeorge,

Hello, Is there any chance that I could have a copy of the regex please?

I am not using any regex filters at all, and would like to get into it. Can anyone point me in the right direction? How many of you are using regex filters and how many filters are you using?

Sorry to ask so many questions, but I want to see if it's worth my time getting to grips with.

 

Cheers

]]> Thu, 31 Aug 2006 05:32:20 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8874&title=catching-floating-div-spam#8874 <![CDATA[Catching Floating DIV spam : No problem! Lately, I&#039;m actually...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8604&title=catching-floating-div-spam#8604 Author: sgeorge
Subject: 5668
Posted: 27 July 2006 at 10:15am

No problem!  Lately, I'm actually seeing 3 general spam techniques for exploiting the float property in CSS.  I sent you all 3 corresponding keywords that I use to combat 'em.

Stephen
]]> Thu, 27 Jul 2006 10:15:45 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8604&title=catching-floating-div-spam#8604 <![CDATA[Catching Floating DIV spam : any chance I could get a copy...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8601&title=catching-floating-div-spam#8601 Author: vrspock
Subject: 5668
Posted: 26 July 2006 at 11:26pm

any chance I could get a copy of this regex as well?  Thanks.

]]> Wed, 26 Jul 2006 23:26:56 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8601&title=catching-floating-div-spam#8601 <![CDATA[Catching Floating DIV spam : Absolutely, happy to.I&#039;ve...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8550&title=catching-floating-div-spam#8550 Author: sgeorge
Subject: 5668
Posted: 19 July 2006 at 5:19pm

Absolutely, happy to.

I've had very good success with keyword.  After almost a month of using it, I haven't had anyone of my users notify of anything like this getting through.

On the false positives side of things, I rigorously check my quarantine, and over the past few weeks we've had 3 false positives.  It's not 100% perfect, but it's very close to it - it's a rarity for it to catch something by mistake - but it can happen.

Stephen
]]> Wed, 19 Jul 2006 17:19:51 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8550&title=catching-floating-div-spam#8550 <![CDATA[Catching Floating DIV spam : Hey Sgeorge, I would love to get...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8548&title=catching-floating-div-spam#8548 Author: Alan
Subject: 5668
Posted: 19 July 2006 at 2:39pm

Hey Sgeorge, I would love to get the code too.
Thanks.
]]> Wed, 19 Jul 2006 14:39:29 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8548&title=catching-floating-div-spam#8548 <![CDATA[Catching Floating DIV spam : Just to clarify... unlike what...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8507&title=catching-floating-div-spam#8507 Author: sgeorge
Subject: 5668
Posted: 12 July 2006 at 11:21am

Just to clarify... unlike what the the title of this forum topic would suggest, what we're trying to block here are not "floating DIVs".

In fact, while the example email source that gbrayut posted does have DIVs in it, none of the DIV elements use/abuse the float property.  The trick to isolating this type of spam is to identify when and how the float property is abused - which, in this context, is not with DIVs.

Stephen
]]> Wed, 12 Jul 2006 11:21:29 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8507&title=catching-floating-div-spam#8507 <![CDATA[Catching Floating DIV spam : dcook, without revealing too...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8490&title=catching-floating-div-spam#8490 Author: sgeorge
Subject: 5668
Posted: 10 July 2006 at 5:19pm

dcook, without revealing too much about the RegEx code that I sent you...

The "float:right" css rule is a commonly-used statement, but the RegEx that I use avoids the typical uses of "float:right".  Agreed, if we were to block all occurences of "float:right", we would end up with an enormous amount of false positives.

I can explain what the convoluted RegEx statement does and what it's supposed to do by way of PM, if you'd like.  Also, I haven't experienced any false positives with that RegEx yet - but if you do, please let me know.

Stephen


Edited by sgeorge]]> Mon, 10 Jul 2006 17:19:31 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5668&PID=8490&title=catching-floating-div-spam#8490