Re: message screener problem

  • From: "Vanvelthoven, Danny" <D.Vanvelthoven@xxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 18 Jul 2003 14:26:28 +0200

Hi Jim,

Found it out already. But thanks anyway.
Seems that the message screener is not that good anyway.
I've already decided to install a spam control on a Linux based station.  So
I don't have to bother about costly software.

Danny

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: Thursday, July 17, 2003 15:15
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: message screener problem


http://www.ISAserver.org


Are the mails in HTML-format?
If so, the message screener will not be able to scan them. Also, many
spam-mails break up words with invalid or commetn HTML tags. This is done to
skirt basic text-matching filters, like the message screener.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!



http://www.ISAserver.org


 
Hi all,
 
I've installed the message screener on a smtp server.  Setup was done
according to one of the articles on the isaserver.org site. However, it
seems now that the screener is just checking the subject and not the body.  
 
example:  there is a rule that checks for "Generic Viagra" in header or
body.  If I send 2 test mails, one  with these words in the subject and one
in the body, the mail with the words in the subject is caught, not the one
with the words in the body.
 
My setup:
ISA + SP1 + FP1 on Win2k SP3 (+all hotfixes)
SMTP (IIS5) on Win2k SP3 (+all hotfixes) + message screener

Anybody any id?

Danny 

 

------------------------------------------------------------------------ 
LEGAL  DISCLAIMER:  The information included in this message is personal
and/or confidential and intended exclusively for the addressees as stated.
This message and/or the accompanying documents may contain confidential
information and should be handled accordingly.  If you are not the intended
reader of this message, we urgently request that you notify Centric KSI
immediately and that you delete this e-mail and any copies of it from your
system and destroy any printouts immediately. It is forbidden to distribute,
reproduce, use or disclose the information in this e-mail to third parties
without obtaining prior permission from Centric KSI.  We expressly point out
that there are risks associated with the use of e-mail like data corruption,
interception, unauthorised amendment, viruses and unforeseen delays. Centric
KSI and the companies within the group shall not accept any liability
whatsoever for damage resulting from the use of e-mail.  Legally binding
obligations can only arise for Centric KSI by means of a written instrument,
signed by an authorized representative of Centric KSI.
------------------------------------------------------------------------


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security Resource
Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security Resource
Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
d.vanvelthoven@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
 

------------------------------------------------------------------------ 
LEGAL  DISCLAIMER:  The information included in this message is personal
and/or confidential and intended exclusively for the addressees as stated.
This message and/or the accompanying documents may contain confidential
information and should be handled accordingly.  If you are not the intended
reader of this message, we urgently request that you notify Centric KSI
immediately and that you delete this e-mail and any copies of it from your
system and destroy any printouts immediately. It is forbidden to distribute,
reproduce, use or disclose the information in this e-mail to third parties
without obtaining prior permission from Centric KSI.  We expressly point out
that there are risks associated with the use of e-mail like data corruption,
interception, unauthorised amendment, viruses and unforeseen delays.
Centric KSI and the companies within the group shall not accept any
liability whatsoever for damage resulting from the use of e-mail.  Legally
binding obligations can only arise for Centric KSI by means of a written
instrument, signed by an authorized representative of Centric KSI.
------------------------------------------------------------------------

Other related posts: