Thanks Matt, the trailing space trick will do... I have the luxury of being tough on specific words so I am >:-)
Rick Davidson National Systems Manager North American Title Group - ----- Original Message ----- From: "Matt" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, April 12, 2004 2:21 PM Subject: Re: [Declude.JunkMail] Words found in encoded file atachments > ...or a trailing space. Base64 encoding doesn't use punctuation or > spaces. Your list would never hit base64 if all you did was add a > space, and that would probably hit more often than with punctuation. > Staying away from words 5 characters or less also helps because for each > additional character, you are about 28 times less likely to see that > pattern in base64 code. Needlesstosay, I'm not big on word filtering, > though I do have several filters, all scored very low. > > Matt > > > Colbeck, Andrew wrote: > > >Rick, no, the BODY text filtering searches everywhere, including inside > >binary attachments. > > > >Your best bet is to assign those nasty words with very little weight, don't > >use very short words, and/or try to match a phrase instead, or use trailing > >punctuation. > > > >For example, I've found that although they are darn common in spam, I can't > >use these with a weight any higher than 1: > > > >tit > >t1t > >mlm > >m1m > >hgh > > > >because of their false positives in binary attachments and BASE64 encodings > >of attachments. > > > >Andrew 8) > > > >-----Original Message----- > >From: Rick Davidson [mailto:[EMAIL PROTECTED] > >Sent: Monday, April 12, 2004 10:35 AM > >To: [EMAIL PROTECTED] > >Subject: [Declude.JunkMail] Words found in encoded file atachments > > > > > >Is it possible to exclude the filters from being triggered when finding > >words in the file attachment encoding in the message body? I have been > >getting some false positives on some nasty words that were arbitrarily > >formed in the encoding segments > > > >Rick Davidson > >National Systems Manager > >North American Title Group > >--- > >[This E-mail was scanned for viruses by Declude Virus > >(http://www.declude.com)] > > > >--- > >This E-mail came from the Declude.JunkMail mailing list. To > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >type "unsubscribe Declude.JunkMail". The archives can be found > >at http://www.mail-archive.com. > >--- > >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > >--- > >This E-mail came from the Declude.JunkMail mailing list. To > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >type "unsubscribe Declude.JunkMail". The archives can be found > >at http://www.mail-archive.com. > > > > > > > > > > -- > ===================================================== > MailPure custom filters for Declude JunkMail Pro. > http://www.mailpure.com/software/ > ===================================================== > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
