Was it base 64 encoded? (double encoded?) > -----Original Message----- > From: Seelig, CD (Chris) [mailto:[EMAIL PROTECTED] > Sent: Monday, September 22, 2003 1:03 PM > To: 'Fred I-IS.COM'; Seelig, CD (Chris) ; > [EMAIL PROTECTED] > Subject: RE: [SAtalk] OBFUSCATING comment not matching. > > > > > Hmm, something appears to have kindly converted the thing to > clear text. > > Cut and past from a 'view source' ...... > > ----Start Paste----- > <div align="center"><!--uyh5qq116vkv--> > <p><font color="#003366" > size="5"><!--nms44e1oi39s--><strong>W<!--sy79elou8bmh-->holes< > !--cc21y11xvf4 > k-->ale P<!--lerofckry85j16-->rescrip<!--qsici83xcp4fg-->tion > Medi<!--ph8ps83lyw79g3-->cation<!--aycbqo3womedk1-->s</strong> > </font><br> > <font color="#FF0000" > size="5"><!--zvgi7fg3uizo1--><strong>O<!--8lfmgy3la3e-->ur > doct<!--bpryu91t042-->ors w<!--dry3sz2wv50y5-->ill > wr<!--ldiqme31roc8cj-->ite yo<!--gjqek81aved-->u <br> > a pre<!--44lb0mq8vy-->scripti<!--i1whwz3l4wbbj-->on > fo<!--pwdvgk1v4rou-->r fre<!--0odpha10j2c-->e!</strong><br> > <em>B<!--3icvbb1j7f-->uy Yo<!--w8ronn2kpof2w2-->ur > Pre<!--o3tu612dmkj51-->scripti<!--ij7jf6wwtz4-->on > Me<!--dxpe391yox4w-->ds > Onl<!--9qvcrflikp-->ine </em></font><br> > <!--wfhq622fzlip32--><font color="#003366" > size="5"><strong>S<!--xuett4zyv31-->ee Fo<!--9vre7az8lkj81w-->r > Yo<!--9igs303qev-->urs<!--0l15wqh1uyx-->elf...<br> > <a > href="http://www.uagadugu.biz/vpr6636/";>Che<!--houykr1povhbg3-->ck > It<!--pj2036jowe--> Ou<!--iyopjs2tyk7-->t > He<!--8rfake21pp9g-->re</a></strong></font><br> > </p><!--r6kdr17kpp5e--> > <br><!--sz66ho3momwf3--> > <br><!--l609pe1ams0--> > <A HREF="http://mindazzehorg.biz/rm.html";>St<!--ma50l92m2ij9-->op > Re<!--nejniu3uw70-->ceiv<!--stff853ei5-->ing t<!--d445nh3rxz79-->he > o<!--tcuojc1lon-->ffer<!--cv00i82jcre162-->s</a> </p> > </div> > ----End Paste---- > > Clearly lots of comments cutting up words. This is MD 2.35 > (also 2.30 on my > test server) and SA 2.54. > > > Chris > > -- > ---- > Chris Seelig Phone: +44 1235 446234 > Network Development Group, Fax : +44 1235 445727 > Information Technology Department Email: [EMAIL PROTECTED] > Rutherford Appleton Laboratory, WWW : http://www.itd.clrc.ac.uk/ > Chilton, > Didcot, > Oxfordshire, > OX11 0QX, > United Kingdom. > > > > > -----Original Message----- > > From: Fred I-IS.COM [mailto:[EMAIL PROTECTED] > > Sent: 22 September 2003 17:26 > > To: Seelig, CD (Chris) ; [EMAIL PROTECTED] > > Subject: Re: [SAtalk] OBFUSCATING comment not matching. > > > > > > I don't see any comments in this message, normally they start > > with <!-- and > > end with --> and they must break a word for the rule to hit. > > > > Frederic Tarasevicius > > Internet Information Services, Inc. > > > > > > Seelig, CD (Chris) wrote: > > > The OBFUSCATING_COMMENT rule on our servers seem to miss a lot of > > > mails that would appear (by eye)to match the regex (see included > > > item, if it makes it out of exchange intact). Any obvious > reason for > > > this? > > > > > > The servers are using MIMEDefang to feed SA. Some emails do match, > > > not all. Possibly some decoding (or not) issue? > > > > > > Chris > > > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk >
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
