Re: FROM header obfuscation

2022-02-10 Thread Laurent S.
On Thursday, February 10th, 2022 at 16:33, Kris Deugau wrote: > (Please keep mail on-list) Oops, replied too quick without checking this. Sorry. > > Out of curiosity, I've tested it with a replace_tag rule (//) > > without luck. Shouldn't those UTF8 range be added to the ReplaceTags plugin? >

Re: FROM header obfuscation

2022-02-10 Thread Kris Deugau
(Please keep mail on-list) Laurent S. wrote: On Tuesday, February 8th, 2022 at 16:41, Kris Deugau wrote: I have a longish list of rule groups similar to below for different extended UTF8 ASCII-lookalike characters and words. Some are derived from rules discussed on this list within the past y

Re: FROM header obfuscation

2022-02-08 Thread Kris Deugau
Frido Otten wrote: Hi All, Recently we're seeing more spam passing our spamfilters using text obfuscating in the FROM header. The problem mainly targets users which are using mail clients like iPhone Mail which are only displaying the display name of the FROM header and not the actual email a