Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - How to block HTML e-mail?
  FAQ FAQ  Forum Search   Register Register  Login Login

How to block HTML e-mail?

 Post Reply Post Reply
Author
Claus View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Claus Quote  Post ReplyReply Direct Link To This Post Topic: How to block HTML e-mail?
    Posted: 09 May 2003 at 10:16am

Hi

Just bye spamfilter to Danish ISP, it has work very fine in the test periode. I do have a small problem with HTML e-mail and keywords. I can not blok html e-mail - only normal text e-mail is responding on my keywords.

Claus 

Back to Top
Bill Stewart View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Bill Stewart Quote  Post ReplyReply Direct Link To This Post Posted: 09 May 2003 at 10:41am

Examine your HTML messages closely. I have found that spammers are learning to bypass keyword content filters by embedding comments in the messages; e.g.

Get your via<!--342fxfdf-->gra here

The embedded comment doesn't get displayed by the mail client but fools keyword checkers. A useful option for SpamFilter would be an HTML parser that knows to ignore comments like these.

This might be why messages are making it through your filter.

Back to Top
Alan View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Alan Quote  Post ReplyReply Direct Link To This Post Posted: 09 May 2003 at 12:14pm

Here's a thought...

How about using a keyword filter for the opening portion of a tag for an HTML comment as follows

<!

That way all email with HTML comments get filtered.  Realistically who needs comments in the HTML of an email message?

Likewise you would be able to filter out all HTML messages that use web images (to get by keyword filters) by using

img src=

These will increase the required monitoring of the quarantine, but if they are a big problem they may help out.

Comments?

Back to Top
metrotel View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote metrotel Quote  Post ReplyReply Direct Link To This Post Posted: 10 May 2003 at 6:42pm

Benn running the HTML filter suggestions, it blocks about 90% of my email -- ALL SPAM  -- no legit messages hit yet!  I can't believe it!!!!!

 

James Taylor

jltaylor@metrotel.net

Back to Top
George View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote George Quote  Post ReplyReply Direct Link To This Post Posted: 11 May 2003 at 5:46am

Here is another trick spammers are now using. They will place this code in html emails in between words .

<font face="Arial" size="4">Would you like a larger one...? or for your

spouse to have a larger one. </font><b><font face="Arial" color="#FFFFFF">6rp4bl2

6rp4bln</font></b><font face="Arial" size="4"><br>

Our product is an excellent way to add permanent length and girth to a </font>

If you place this sample code in an html editor and do a preview you will see what I mean as to how it works.

I have been using color="#FFFFFF in the keywords list and have seen a dramatic decrease in spam getting by the filter.

Just remember that some legitimate email will have images in them. Most email should not have a white font in them since unless the body background is black the reader would not be able to read the email.

Just some more food for thought.

 

Back to Top
Alan View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Alan Quote  Post ReplyReply Direct Link To This Post Posted: 12 May 2003 at 12:18pm

Glad it worked for you. 

No guarantee it will last long as there are a lot more ways that keywords can be messed with using HTML that I won't mention.  Don't want to give any help to spammers...

Back to Top
metrotel View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote metrotel Quote  Post ReplyReply Direct Link To This Post Posted: 13 May 2003 at 2:50pm

Well, looks like legit email sent HTML may have the following line:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

Which means the "comment" filter doesn't work so well.

 

Back to Top
Alan View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Alan Quote  Post ReplyReply Direct Link To This Post Posted: 15 May 2003 at 12:17pm

Yes it all depends on what type of mail you recieve.

If you regularly recieve a lot of HTML base email from people that you don't have in your whitelist then this will not work for you.

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.254 seconds.