Are you using anything like "SKIPIFWEIGHT" options in the filter or "ENDS" clauses.

Darrell

Kim Premuda writes:

Also, one thing that can affect the filter files that I have seen in the
past is spammers will put fake html tags in the middle of the URI to get it
past filters


Example: americ<faketag>aspharm.com - the email client will normally
interpret this correctly and display americaspharm.com (i.e. not rendering
the fake tag).


My original post that contained the offending message was in plain-text format showing no embedded HTML tags in the domain name. I did save the 'D*.SMD' file...here is how the URL shows in plain-text:

http://americaspharma.com/


I suspect that the test is not being run at all, and that something (another test, perhaps?) is preventing this...but, I have no idea what to look for.




--
Kim W. Premuda
FastWave Internet Services
San Diego, CA


--
---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



------------------------------------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers.



--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.

Reply via email to