<?xml version="1.0" encoding="utf-8" ?>
<?xml-stylesheet type="text/xsl" href="RSS_xslt_style.asp" version="1.0" ?>
<rss version="2.0" xmlns:WebWizForums="http://syndication.webwiz.co.uk/rss_namespace/">
 <channel>
  <title>Spam Filter ISP Forums : keywords filter</title>
  <link>https://www.logsat.com/spamfilter/forums/</link>
  <description><![CDATA[This is an XML content feed of; Spam Filter ISP Forums : Spam Filter ISP Support : keywords filter]]></description>
  <pubDate>Wed, 14 Oct 2026 03:49:31 +0000</pubDate>
  <lastBuildDate>Fri, 06 Jan 2006 08:54:12 +0000</lastBuildDate>
  <docs>http://blogs.law.harvard.edu/tech/rss</docs>
  <generator>Web Wiz Forums 11.04</generator>
  <ttl>360</ttl>
  <WebWizForums:feedURL>https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=5436</WebWizForums:feedURL>
  <image>
   <title><![CDATA[Spam Filter ISP Forums]]></title>
   <url>https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png</url>
   <link>https://www.logsat.com/spamfilter/forums/</link>
  </image>
  <item>
   <title><![CDATA[keywords filter : I&amp;#039;ve noticed this on a few...]]></title>
   <link>https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5436&amp;PID=7055&amp;title=keywords-filter#7055</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="https://www.logsat.com/spamfilter/forums/member_profile.asp?PF=2">Guests</a><br /><strong>Subject:</strong> 5436<br /><strong>Posted:</strong> 06 January 2006 at 8:54am<br /><br /><P>I've noticed this on a few occassions and just had another instance of it.&nbsp; Periodically, spamfilter seems to&nbsp;allow an email to slip through that contains a black listed keyword within the body of the email.&nbsp; At first I thought perhaps my server was&nbsp; overloaded and spamfilter just skipped over the keyword filter somehow, but after catching several of these I began to take a deeper look into what's going on.</P><P>After investigating and scratching my head a few times, I decided to go onto the actual mail server and open the corresponding .mai file with notedpad for a truely raw view of the email in question.&nbsp; Here's what I found out...Outlook is rendering the emails as plain text.&nbsp; Webmail also renders the emails as "normal" looking&nbsp;emails, however, upon inspecting the .mai file the email appears to be using some sort of uuencoding through out the body of the message that is allowing it to completely slip through despite that it appears to be laced with plain text keywords that I have black listed.&nbsp; Anyone got any ideas on how to combat these?&nbsp; See sample below.</P><P>Received: from noah (&#091;10.14.10.18&#093;) by v-sources.com with MailEnable ESMTP; Thu, 05 Jan 2006 19:34:40 -0500<BR>Received: from 151.203.109.90 by v-sources.com (LogSat Software SMTP Server) Thu, 5 Jan 2006 19:34:37 -0500<BR>Message-ID: &lt;<A href="mailto:IIBDOMPFDHDCOEFHNEDPNPOECGAB.merrill_gorman_lk@fyi.net" target="_blank">IIBDOMPFDHDCOEFHNEDPNPOECGAB.merrill_gorman_lk@fyi.net</A>&gt;<BR>From: "Merrill Gorman" &lt;<A href="mailto:merrill_gorman_lk@fyi.net" target="_blank">merrill_gorman_lk@fyi.net</A>&gt;<BR>To: <A href="mailto:fdickey@v-sources.com" target="_blank">fdickey@v-sources.com</A><BR>Subject: Stock Market Standouts<BR>Date: Thu, 05 Jan 2006 22:33:44 +0000<BR>MIME-Version: 1.0<BR>Content-Type: text/plain<BR>Content-Transfer-Encoding: base64<BR>X-Server: LogSat Software SMTP Server<BR>X-SF-RX-Return-Path: &lt;<A href="mailto:merrill_gorman_lk@fyi.net" target="_blank">merrill_gorman_lk@fyi.net</A>&gt;<BR>X-SF-HELO-Domain: amfam.com<BR>X-Read: 1</P><P>Vmlub2JsZSBJbmMuIChWTkJMLm9iKQ0KDQpBIE1BU1NJVkUgTUFSS0VUSU5H<BR>IENBTVBBSUdOIEhBUyBCRUdVTiBGT1IgRlJJREFZIEpBTiA2VEggDQpBTkQg<BR>R09JTkcgSU5UTyBUSEUgUkVTVCBPRiBUSEUgV0VFSy4gV0UgRkVFTCBJVFMg<BR>R09JTkcgVE8NCkhJVCBPVkVSIDIwMCUgR0FJTiBUSElTIFdFRUsgV0lUSCBB<BR>TEwgVEhFIE5FVyBJTlZFU1RPUlMgDQpBTkQgTkVXIEJJRyBORVdTIEZPUiBU<BR>SEUgTkVXIFlFQVIuDQoNCioqKioqKioqKioqKioqKioqKioqKioqKioqKioq<BR>KioqKioqKioqKioqKioqKioqKioqKioqKioqKioNClRISVMgT05FIElTIEdP<BR>SU5HIFRPIEJFIEEgSFVHRSBQTEFZRVIgU1RBUlRJTkcgVE9NTU9ST1chIQ0K<BR>QU5EIFdFIDEwMCUgU0FZIFBVVCBUSElTIE9ORSBPTiBZT1VSIFJBREFSLg0K<BR>KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq<BR>KioqKioqKioqKioqKg0KDQpTeW1iMGw6IFZOQkwNClByaWNlOiAuMDQNClNo<BR>b3J0X1Rlcm06IC4wOQ0KTG9uZ19UZXJtOiAuMjANClJlY29tbWVuZGF0aTBu<BR>OiAoQlVZKQ0KDQpCVVlfQUxFUlQgSVNTVUVEIEZPUiBGUklEQVkgSkFOIDZU<BR>SCAhDQpBQ1QgUVVJQ0sgRE9OVCBXQUlUOyBWRVJZIFNUUk9ORyBHQUlOUyBF<BR>WFBFQ1RFRCBUT01NT1JPVw0KQU5EIEVTUEVDSUFMTFkgTU9OREFZIEdFVCBJ<BR>TiBFQVJMWSAhIQ0KDQpUbyBBbGwgTWVtYmVyczoNCkFmdGVyIGV4dGVuc2l2<BR>ZSByZXNlYXJjaCB3ZSBoYXZlIHBpY2tlZCBvdXIgQmVzdCB3aW5uZXIgZm9y<BR>IHRoZSANCmJlZ2lubmluZyBvZiB0aGUgeWVhci4gSXQgaXMgZ29pbmcgdG8g<BR>YmUgb24gdGhlIG1vdmUgYW5kIE5PVCBzdG9wcGluZy4gDQpEbyBOb3QgTWlz<BR>cyB0aGlzIG9wcG9ydHVuaXR5IHRvIHR1cm4geW91ciA1MDAgaW50byAyNTAw<BR>IG9yIDEwMDAgaW50byANCjUsMDAwLiBSZW1lbWJlciB0aGlzIGlzIHlvdXIg<BR>Y2hhbmNlIHRvIGNhc2ggaW4gZm9yIHRoZSBiZWdpbm5pbmcgb2YgdGhlIHll<BR>YXIuDQoNCldoYXQgd2UgYWxsIGtub3c6DQoNCiAtIEFtZXJpY2EgaXMgaW52<BR>b2x2ZWQgaW4gYSB3YXIgb24gdGVycm9yLg0KIC0gV29ybGQgb2lsIHByaWNl<BR>cyBhcmUgaG9sZGluZyBzdHJvbmcgYXQgcmVjb3JkIGxldmVscy4NCiAtIHdv<BR>cmxkIGdvbGQgcHJpY2VzIGFyZSBob2xkaW5nIHN0cm9uZyBhdCByZWNvcmQg<BR>bGV2ZWxzLg0KDQpBbmQgaGVyZSBjb21lcyBWaW5vYmxlIGluIHRoZSByaWdo<BR>dCBwbGFjZSBhdCB0aGUgcmlnaHQgdGltZToNCg0KVk5CTCBoYXMgYmVlbiB3<BR>b3JraWduIHdpdGggUkZJRCAoUmFkaW8gRnJlcXVlbmN5IElEKSBhcyBpdA0K<BR>cmVhbGF0ZXMgdG8gdGhlIG9pbCBhbmQgbWluaW5nIGluZHVzdHJ5LiBUaGlz<BR>IHRlY2hub2xvZ3kgYWxsb3dzDQpmb3IgcmVtb3RlIHRyYWNraW5nIG9mIGFz<BR>c2V0cywgcGVyc29ubmVsLCBhbmQgZW52aW9ybWVudGFsDQpjb25kaXRpb25z<BR>Lg0KDQpSRklEIHRoZWNub2xvZ3kgY2FuIGNyZWF0ZSAiSGlnaCBTZWN1cml0<BR>eSBTcGFjZSIgaW4gbG9jYWxlcw0Kd2hlcmUgaXQgaXMgZGVlbWVkIG5lY2Vz<BR>c2FyeS4gV2l0aCB0aGUgY3VycmVudCB0aHJlYXQgdG8gQW1lcmljYQ0KYW5k<BR>IGl0cyByZXNvdXJjZXMgUkZJRCB0ZWNobm9sb2d5IGlzIGJlaW5nIGRlcGxv<BR>eWVkIGFsbCBvdmVyDQp0aGUgY291bnRyeS4NCg0KVmlub2JsZSBoYXMgcmVj<BR>ZW50bHkgYWNxdWlyZWQgYW4gaW50ZXJlc3QgaW4gYSBudW1iZXIgb2Ygb2ls<BR>DQphbmQgbWluaW5nIHByb2plY3RzLCB3aXRoIGludGVudCBvZiB1c2luZyB0<BR>aGVzZSBwcm9wZXJ0aWVzIGFzIGENCnRlc3RpbmcgZ3JvdW5kIGZvciB0aGVp<BR>ciB0ZWNobm9sb2d5IGFzIHdlbGwgYXMgYWRkIHNoYXJlaG9sZGVyDQp2YWx1<BR>ZS4NCg0KV2UgYmVsaWV2ZSB0aGF0IFZpbm9ibGUgaGFzIGFuIGltcHJlc3Np<BR>dmUgcHJvZHVjdCBhdCB0aGUgcmlnaHQNCnRpbWUuIE1ha2Ugc3VyZSB5b3Ug<BR>a2VlcCBhIGV5ZSBvbiB0aGlzIGNvbXBhbnkgZXNwZWNpYWxseSB0b21tb3Jv<BR>dyENCg0KVGhlIHN0b2NrIGlzIGN1cnJlbnRseSB0cmFkaW5nIGF0IGFyb3Vu<BR>ZCA0LTUgY2VudHMuIEF0IHRoaXMgcHJpY2UgDQppdCBjb3VsZCBtZWFuIGxh<BR>cmdlIHByb2ZpdHMgaW4gdGhlIHZlcnkgbmVhciBmdXR1cmUuDQoNCg0KV2Ug<BR>YmVsaWV2ZSB0aGVyZSBpcyBsaXR0bGUgdGltZSBsZWZ0IHRvIGdldCBpbiBv<BR>biB0aGlzIHN0b2NrIGJlZm9yZSBpdCB0YWtlcw0Kb2ZmLiBUaGlzIHN0MGNr<BR>IGlzIGJyZXdpbmcgaW4gdGhlIG1vc3QgcHJvZml0aW5nIGluZHVzdHJpZXMg<BR>aW4gdGhlIG1hcmtldC4NCkp1c3QgaW1hZ2luZSBob3cgbXVjaCBpdCB3aWxs<BR>IHRha2Ugb2ZmIGluIHRoZSBuZXcgeWVhciBhcyB0aGUgbWFya2V0IHRha2Vz<BR>DQpvZmYgYWdhaW4uDQoNCioqR09PRCBMVUNLLCBBY3QgUXVpY2shIS4uIEFO<BR>RCBUUkFERSBBVCBUSEUgVE9QKioNCg0KX19fX19fX19fX19fX19fX19fX19f<BR>X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KSW5mb3JtYXRpMG4g<BR>d2l0aGluIHRoaXMgZW1haXwgYzBudGFpbnMgImYwcnc0cmRfbDAwa2luZw0K<BR>c3Q0dGVtZW50cyIgd2l0aGluIHRoZSBtZWFuaW5nIG9mIFNlY3Qxb24gMjdB<BR>X29mIHRoZQ0KU2VjdXIxdDFlc19BY3Qgb2ZfMTkzMyBhbmQgU2VjdDEwbiAy<BR>MUIgb2YgdGhlX1NlY3VyMXQxZXMNCkV4Y2g0bmdlX0FjdCBvZl8xOTM0LiBB<BR>bnlfc3Q0dGVtZW50cyB0aGF0IGV4cHJlc3Mgb3INCmludjB8dmUgZGlzY3Vz<BR>c2kwbnMgd2l0aCByZXNwZWN0IHRvIHByZWRpY3RpMG5zLF9nMGFscywNCmV4<BR>cGVjdGF0aTBucywgYmV8aWVmcywgcHxhbnMsIHByMGplY3RpMG5zLCAwYmpl<BR>Y3RpdmVzDQosYXNzdW1wdGlvbnMgb3IgZnV0dXJlIGV2ZW50cyBvciBwZXJm<BR>b3JtYW5jZSBhcmUgbm90DQpzdGF0ZW1lbnRzIG9mIGhpc3QwcmljYWwgZmFj<BR>dCBhbmQgbWF5IGJlICJmMHJ3NHJkDQpsMDBrMW5nIHN0YXRlbWVudHMuIklu<BR>IGMwbXBsaWFuY2Ugd2l0aCBTZWN0MTBuXzE3KGIpLA0Kd2UgZGlzY3xvc2Ug<BR>dGhlIHA0eW1lbnQgb2ZfMTVPT08gZG98fGFycyBwcmkwciB0byB0aGUNCnB1<BR>YnxpY2F0aW9uIG9mIHRoaXMgcmVwb3J0LiBCZSBhd2FyZSBvZiBhbiBpbmhl<BR>cmVudA0KY29uZmxpY3Qgb2YgaW50ZXJlc3QgcmVzdWx0aW5nIGZyb20gc3Vj<BR>aCBwNHltZW50LiA=</P><P>&nbsp;</P><P>&nbsp;</P>]]>
   </description>
   <pubDate>Fri, 06 Jan 2006 08:54:12 +0000</pubDate>
   <guid isPermaLink="true">https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5436&amp;PID=7055&amp;title=keywords-filter#7055</guid>
  </item> 
 </channel>
</rss>