Is there a gotcha in filter text files when the message is in HTML format?
The following line works if I send myself a message from HotMail, but didn't
on an actual piece of spam I just received, whose relevant bit of text I'll
reproduce here with an underscore inserted to get around my own filter:
#Dec-02-2002 AC Very common in Chinese hosted spamvertisement "unsubscribe"
footers
BODY 0 CONTAINS btamail.net.cn
And the verbatim snippet:
<FONT
face=verdana color=#800000 size=3><STRONG>Unsubscribe
at: [EMAIL PROTECTED]</STRONG></FONT>
******</BODY></HTML>
If it makes any difference, the header defines the e-mail format as:
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
I have already checked the Declude log (MED) to make sure there was no error
reported in accessing the filter text file... No problem reported.
Andrew 8)
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
