Shouldn't this have been caught by the comments test?

The COMMENTS test *only* looks for HTML comments that are designed to bypass filters. It does not look for made-up HTML tags, or legitimate HTML tags that are used to bypass filters.


In this case:

opportunities+ACY-nbsp+ADsAJg-nbsp+ADsAJg-nbsp+ADsAJg-nbsp+ADsAJg-nbsp+ADsAJ...

It's hard to say what the actual HTML code is, as this appears to have been translated to something else (I'm not familiar with whatever it was translated to). But in any case, it appears that it is using " " to create spaces in the E-mail. Unfortunately, that is valid HTML coding.


What might be nice would be a test that would count how many times each HTML feature was used -- for example, if it saw that " " appeared 50 times in an E-mail, it could trigger the test.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to