hi scott,
up to now i am doing fine with a filter looking for some encoded letters that don't have to be encoded, not even in german (like e, better known as e). giving the whole thing a second thought i think it is better to filter for some encoded letters (5 to 10) then to decode the whole mail and let it run against several filters. i like the thought that the spammers help me to save some resources!
mfg
i.a.
gez. markus guhl
***********************************
lds nrw
dez. 235
tel.: 0211 9449 2578
fax.: 0211 9449 8344
mailto:[EMAIL PROTECTED]
***********************************
-----Ursprüngliche Nachricht-----
Von: R. Scott Perry [mailto:[EMAIL PROTECTED]]
Gesendet am: Donnerstag, 8. Januar 2004 14:26
An: [EMAIL PROTECTED]
Betreff: Re: [Declude.JunkMail] &#-coded spam
>during the last 2 days i found several spams where to whole body was coded
>in ASCII numbers (&#followed by the ascii number of the letter like  
>for " ")
>
>right now i filter for some strings like
>"order " (means "order ").
>
>does jm decodes this kind of coded mailbodys before the filters run?
No. Declude handles some SMTP-level encoding (such as base64 bodies), but
does not attempt to decode HTML.
>if not is there a possibility that jm will decode this in the future?
It is possible.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
