RE: Bypass URI check

2005-07-12 Thread Martin.Carnegie

> -Original Message-
> From: Daryl C. W. O'Shea [mailto:[EMAIL PROTECTED] 
> Sent: Monday, July 11, 2005 5:32 PM
> To: Carnegie, Martin
> Cc: users@spamassassin.apache.org
> Subject: Re: Bypass URI check
> 
> 
> [EMAIL PROTECTED] wrote:
> > Hi All,
> > 
> > I have received a few messages like the following.  This asks the
> > receiver to copy and past the link into their web browser.  
> Since the
> > href is missing, there is no URI check.  That sucks, 
> because the URIBL
> > is my best friend right now (love black).  We are close to 
> marking it
> > and URIBL would have definitely got it over.  Any ideas on handling
> > this?
> 
> SpamAssassin 3.1.0 will catch these.  Depending on your 
> environment you 
> could consider running 3.1.0-pre3.
> 
> Daryl
> 
> 

It is good to hear that 3.1.0 will catch these.  I cannot go to the pre
releases so I will have to was for GA.  Thanks for the info.


Re: Bypass URI check

2005-07-11 Thread Daryl C. W. O'Shea

[EMAIL PROTECTED] wrote:

Hi All,

I have received a few messages like the following.  This asks the
receiver to copy and past the link into their web browser.  Since the
href is missing, there is no URI check.  That sucks, because the URIBL
is my best friend right now (love black).  We are close to marking it
and URIBL would have definitely got it over.  Any ideas on handling
this?


SpamAssassin 3.1.0 will catch these.  Depending on your environment you 
could consider running 3.1.0-pre3.


Daryl



RE: Bypass URI check

2005-07-11 Thread Chris Santerre
Title: Bypass URI check



I'm thinking 
it may be time for SARE to look at this phrase:
 
"then copy // 
paste the below page into your window: 
"
 
I'll see what I can 
do with it. 
 
--Chris (I also love 
the black ;) 

  -Original Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]Sent: Monday, July 11, 2005 
  10:42 AMTo: users@spamassassin.apache.orgSubject: Bypass 
  URI check
  Hi All, 
  I have received a few messages like the 
  following.  This asks the receiver to copy and past the link into their 
  web browser.  Since the href is missing, there is no URI check.  
  That sucks, because the URIBL is my best friend right now (love black).  
  We are close to marking it and URIBL would have definitely got it over.  
  Any ideas on handling this?
  Microsoft Mail Internet Headers Version 2.0 
  Received: from .atco.ca ([xxx.xxx.10.122]) by 
  .atco.com with Microsoft SMTPSVC(5.0.2195.6713); 
   
  Mon, 11 Jul 2005 08:01:29 -0600 Received: 
  from .atco.ca ([xxx.xxx.10.122])  by .atco.ca (SMSSMTP 4.0.0.59) with SMTP id 
  M2005071108012819018  ; Mon, 11 Jul 
  2005 08:01:28 -0600 Received: from 
  [58.224.196.19] (helo=xxx.xxx.10.122) 
      by 
  .atco.ca with smtp (Exim ) 
      id 
  1Dryqd-0001kd-Sa; Mon, 11 Jul 2005 08:01:28 -0600 X-Orcpt: rfc727;zmailer-log Message-ID: 
  <[EMAIL PROTECTED]> 
  Date: Mon, 11 Jul 2005 10:58:46 -0400 
  From: "Joan Kerry "  
  To: "Joan Kerry " 
  <[EMAIL PROTECTED]> Cc: 
  [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], 
  [EMAIL PROTECTED] Subject: Appetie 
  Suppresant Mon, 11 Jul 2005 07:04:46 -0800 MIME-Version: 1.0 Content-Type: 
  multipart/alternative;     
  boundary="--4.AMLHjl9J5.pLVdgIYrJD9" X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on 
  .atco.ca X-Spam-Level:  
  X-Spam-Status: No, score=4.3 required=5.0 
  tests=J_CHICKENPOX_55,MANGLED_STOP, 
      RCVD_HELO_IP_MISMATCH,RCVD_NUMERIC_HELO autolearn=disabled 
      version=3.0.3 Return-Path: 
  [EMAIL PROTECTED] X-OriginalArrivalTime: 
  11 Jul 2005 14:01:29.0016 (UTC) FILETIME=[08D53380:01C58621] 
  4.AMLHjl9J5.pLVdgIYrJD9 Content-Type: text/plain;  format=flowed;  charset=iso-8859-15 Content-Transfer-Encoding: 7Bit 
  4.AMLHjl9J5.pLVdgIYrJD9 Content-Type: text/plain;  format=flowed;  charset=iso-8859-15 Content-Transfer-Encoding: 7Bit 
  4.AMLHjl9J5.pLVdgIYrJD9-- 
  [EMAIL PROTECTED] 
  Do you find it difficult to cut down on delicious 
  foods filled with carbs? such as 
  pasta,cakes,breads,potato chips and ice cream? 
  if you are one of the people...then copy // paste 
  the below page into your window: 
  slimfat.info 
  Kindly, Joan 
  Kerry - 
  2refrain: s-t-o-p.info 



Bypass URI check

2005-07-11 Thread Martin.Carnegie
Title: Bypass URI check






Hi All,


I have received a few messages like the following.  This asks the receiver to copy and past the link into their web browser.  Since the href is missing, there is no URI check.  That sucks, because the URIBL is my best friend right now (love black).  We are close to marking it and URIBL would have definitely got it over.  Any ideas on handling this?

Microsoft Mail Internet Headers Version 2.0

Received: from .atco.ca ([xxx.xxx.10.122]) by .atco.com with Microsoft SMTPSVC(5.0.2195.6713);

 Mon, 11 Jul 2005 08:01:29 -0600

Received: from .atco.ca ([xxx.xxx.10.122])

 by .atco.ca (SMSSMTP 4.0.0.59) with SMTP id M2005071108012819018

 ; Mon, 11 Jul 2005 08:01:28 -0600

Received: from [58.224.196.19] (helo=xxx.xxx.10.122)

    by .atco.ca with smtp (Exim )

    id 1Dryqd-0001kd-Sa; Mon, 11 Jul 2005 08:01:28 -0600

X-Orcpt: rfc727;zmailer-log

Message-ID: <[EMAIL PROTECTED]>

Date: Mon, 11 Jul 2005 10:58:46 -0400

From: "Joan Kerry " 

To: "Joan Kerry " <[EMAIL PROTECTED]>

Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]

Subject: Appetie Suppresant Mon, 11 Jul 2005 07:04:46 -0800

MIME-Version: 1.0

Content-Type: multipart/alternative;

    boundary="--4.AMLHjl9J5.pLVdgIYrJD9"

X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on .atco.ca

X-Spam-Level: 

X-Spam-Status: No, score=4.3 required=5.0 tests=J_CHICKENPOX_55,MANGLED_STOP,

    RCVD_HELO_IP_MISMATCH,RCVD_NUMERIC_HELO autolearn=disabled 

    version=3.0.3

Return-Path: [EMAIL PROTECTED]

X-OriginalArrivalTime: 11 Jul 2005 14:01:29.0016 (UTC) FILETIME=[08D53380:01C58621]


4.AMLHjl9J5.pLVdgIYrJD9

Content-Type: text/plain;

 format=flowed;

 charset=iso-8859-15

Content-Transfer-Encoding: 7Bit


4.AMLHjl9J5.pLVdgIYrJD9

Content-Type: text/plain;

 format=flowed;

 charset=iso-8859-15

Content-Transfer-Encoding: 7Bit



4.AMLHjl9J5.pLVdgIYrJD9--



[EMAIL PROTECTED]


Do you find it difficult to cut down on delicious foods filled with carbs? 

such as pasta,cakes,breads,potato chips and ice cream?



if you are one of the people...then copy // paste the below page into your window:


slimfat.info


Kindly,

Joan Kerry 

-


2refrain: s-t-o-p.info