Forwarded spam is caught, original message is not

Hugo van der Kooij hvdkooij at vanderkooij.org
Sun Mar 8 09:41:19 GMT 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Chris Barber wrote:

> Here is the pastebin for the original messages which the URIBL rules miss on:
> http://pastebin.com/m6153469c
> 
> Here it is for the forwarded message which does trigger the URIBL rules:
> http://pastebin.com/m25691788
> 
> 
> Thanks again for taking a look at this. It has been plaguing me for many months now. 

It has to do with the extra =0A= code.

Basically it contains normal line breaks and the encoded line breaks.

It seems that this is not uncommon with Microsoft messages as they
allready clean that out for you.

I am not sure who should clean this out before doing the checks. Or
cleaning them out should be part of the checks.

Hugo.

- --
hvdkooij at vanderkooij.org               http://hugo.vanderkooij.org/
PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc

	A: Yes.
	>Q: Are you sure?
	>>A: Because it reverses the logical flow of conversation.
	>>>Q: Why is top posting frowned upon?

Bored? Click on http://spamornot.org/ and rate those images.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmzkr0ACgkQBvzDRVjxmYH2ZQCfVIKYC/RDvjgYNZ0hFLUfBxqz
qEEAnRLpgd/c8y64VFmkX5spMWz1T4QU
=jK1K
-----END PGP SIGNATURE-----


More information about the MailScanner mailing list