Greetings. I'm new to this list, but not to SpamAssassin, and have a query regarding some of the newer types of spam I'm beginning to see at a small ISP I donate time to.
Specifically, I'm talking about the kind of spam that shows up as an HTML link to a HREFed image and *very* little else. I've come up with an additional "eval" for such things but am wondering if that's already been handled by someone or something else. From what I can tell, this type of spam is aimed directly to defeat SpamAssassin and other types of filters because of embedded new-lines and whatnot that foil "body" and "rawbody" tests. What have the assembled masses here to say on the matter? For the sake of reference, here's an entire example: <html><body>friendc <p><a href="http://www.365pharm1.com/pa";><img border="0" src="http://www.8867v.com/file/ra.gif"; ></a></p> <a href="http://www.365pharm1.com/page/a.html";>no more</a> </body></html> Ideas are welcome. If anybody wants to see my "eval" code they're more than welcome. For what it's worth, I'm stuck at 2.43 because the newer versions are too resource-intensive for my rather modest iron. Cheers. +------------------------------------------------+---------------------+ | Carl Richard Friend (UNIX Sysadmin) | West Boylston | | Minicomputer Collector / Enthusiast | Massachusetts, USA | | mailto:[EMAIL PROTECTED] +---------------------+ | http://users.rcn.com/crfriend/museum | ICBM: 42:22N 71:47W | +------------------------------------------------+---------------------+ ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
![http://www.8867v.com/file/ra.gif"](http://www.8867v.com/file/ra.gif"){kind=link}