Re: OT: Criminal Spammers

  • From: "Spencer Read" <spencer@xxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 28 Oct 2003 19:54:54 -0000

Something I have seen recently is the overuse of punctuation in sentences!

For Example (no points for guessing the subject to the spam!)
N.o Pum.ps - No S.urgery - No E.xercises *_100%_Money_Back_G.uarante.e
This seems to be acceptable to GFI.

I don't know whether there's a way of counting the punctuation/letters ratio
and tagging them this way.

...Spence

-----Original Message-----
From: Brian Drought [mailto:brian@xxxxxxxxxxxx] 
Sent: 28 October 2003 16:52
To: [ISAserver.org Discussion List]

http://www.ISAserver.org

> Where does this lovely idea operate?

It runs as a CDO 'sink' in the IIS SMTP mail program... on my GFI box it
sits before GFI. It then tags the mail with a known tag that I then filter
out with GFI. I've also written a program to log mail that GFI has stopped
and place it into a dir aswell as logging it into SQL for display on a web
page :-)

I only started writing it yesterday and as such it's a *very* ugly program,
but if anyone is interested I'll post the source when it's done.

Anyone got any other ideas of how to ID junk mail ?

  Bri


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
spencer@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: