On 2014-07-23 12:23, Paul Stead wrote:
> I've also implemented several rules to try and catch these types of emails. Care to share? Counting encoded chars is easy, of course. One thing to note, webmail and my MUA often will render the encoded characters in their translated format, not literally (as hashes). I'm not sure if this is because the MIME encoding isn't claiming to be text/plain, or because the browser/MUA are trying to be helpful by not being strict... I haven't looked too deeply into it yet. Thus, checking whether the MIME-encoding is text/plain may not be sufficient, because not all of them might be trying to claim text/plain. > Hope the patches above get pushed into production Indeed, though I'm still running SA v3.3.x ... I'm on a CentOS 5.10 platform and, because it's of the virtual-hosting control panel I use, I need my software distributed in RPMs. Until someone builds a proper 3.4 rpm for CentOS/RHEL 5, I'm stuck. (I could be the one to build it, but I'm certainly no expert at RPMs.) --- Amir
