Hello hamann, Sunday, July 31, 2005, 1:01:45 AM, you wrote:
H> for some reason the spam sample at H> http://wolfgang.remsnet.de/medspam.txt is only classified by html H> rules, and by various dns tests, but the common drugs and human H> body part rules missed it. Anyone would have an idea why this is H> so? The rules missed it because the rules weren't written to catch these examples. More likely, as Loren said, the spammer spent some serious time finding some way to get his words past the filters. I've captured your sample, and will include it in my analysis the next time I work on the obfuscation rule set. Bob Menschel
