Print Page | Close Window

Question on keyword filter

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5490
Printed Date: 28 January 2026 at 4:12pm


Topic: Question on keyword filter
Posted By: WebGuyz
Subject: Question on keyword filter
Date Posted: 06 February 2006 at 5:22pm

If I have a keyword like R0lGODdhDgKAAYcAAP is it supposed to find it even if its in the middle of the Base-64 string as below? I did this to try and stop a ton of stock spam thats getting by and its Base-64 encoded. I can'r use the builtin ini setting because it catches too many pictures of grandma and such. Using the filter with a partial of the Base-64 works occasionaly, but I still get a lot through and I checked to make sure that is not whitelisted. Should this work OK consitently or does SFI need to see a delimeter somewhere.

Thanks!

 

R0lGODdhDgKAAYcAAP///4AAAAgAAACAgAAAgP8AAO7w2cHsigAA/2CiYahgkaJo7Hlz79Dn
0JrNmmi0aACAAMfjx02mTdns2afTp7LZshdVTIzGjPD38OHw4b3even06Xy9 fIrezm2VYIPK
lyhC/iMrTBrOo4i90n0PEfReq/FPXhyT7gedvD2+RLJ7CQAAAIIBAADsa74T /PqtAPj7rQCI
04B8IAAAAAAAAAAHAAAABPqtAPT5rQAbme939pjvdwT6rQBkAQAAAAAAAAAA AADI7BYAdvyt
AAAAAAAUBQprrPutABzp73ck6e939v///wAAAAAAAAAAAAAAAAAAAAAAAADM AAAAAVYAZQBy
AGQAYQBuAGEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA
AAAAAAAAAAAA5PqtAAEAAADMAAAAbwEAAOT6rQAxAAAAMQAAALT6rQB28NF3 RQIB1SgAAABv



-------------
http://www.webguyz.net


Replies:
Posted By: Desperado
Date Posted: 07 February 2006 at 8:22am

Webguys,

The built in base64 filter doesn't effect correct base64 images.  It is designed to batch plain text pretending to be images so Grandma should be ok.



-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Posted By: Benny
Date Posted: 07 February 2006 at 10:08am
Dan, do you have an example that I can steal?

Posted By: Desperado
Date Posted: 07 February 2006 at 12:32pm

Benny,

There is an INI setting "FilterBase64html=1".  This filters "Content-Transfer-Encoding=base64 and Content-Type=text/html/plain" but doesn't touch normal image encoding.



-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com


Print Page | Close Window