[NTLUG:Discuss] Spam question

[Ed Coates]

Quoting Wayne Dahl <w.dahl4 at verizon.net>:

> Ok guys, here's a good question for the group.  I'm sure you've all
> gotten spam that you've written filters for, but it seems the latest
> batch of junk is written specifically to bypass filters.  For example,
> if you write a filter to delete messages containing the word fizgig,
> inevitably, someone wanting to bypass your filters will write the email
> in html with something like this crap in it....fiz<-!---12354->gig and
> the filter merrily passes it by.
> 
> So...what have you guys done to kill this garbage when there is nothing
> else in the email to key on?
> 
> Wayne

If these emails are coming from the same address, then it gets added 
to /etc/mail/access, and then I rebuild the hash database with makemap, and 
then the next time it comes in, it gets rejected.

Ed

-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/