hoi
het word steeds gekker met de spam die ik ontvang; normaal gesproken word alle spam geblockt dmv keywords enzo, maar ik krijg nu veel spam die niet geblockt wordt, terwijl er wel degelijk keywords in voorkomen die ik geblockt heb.
dus wat doe ik, ik bekijk de bron en ik kom dit tegen:
<div align="center"><!--wpv9903heo4td--><font size="+2"><strong>G<!--qpld7i2b4h05-->ene<!--iov3a32r91rn-->ric Vi<!--9ybtuq3rc9t-->ag<!--9l43cp37l0-->ra </strong></font></div>
<p>Fo<!--6toq5t22an2b82-->r th<!--m9e6iq1d3kfu93-->e fir<!--xd730t27xe-->st tim<!--xcs6i51a2ld-->e ev<!--5ke9il1dfbi-->er, a g<!--wftkeicv49hj-->ener<!--fhr0fr3r1i-->ic ver<!--xb5j2932mz-->sion o<!--o52gypo4isig3-->f V<!--5mi19epcqyv-->iag<!--qltdyy2w29wdx-->ra is a<!--vyy3gs2ymi-->vaila<!--1i5qo8t93n8930-->ble to y<!--t5etb02eb0uz-->ou. G<!--9pxkeo34lyf-->SC-10<!--bj52te2buxnvgl-->0,
th<!--r1ppmnpej12-->e gene<!--dgzvntyvb888-->ric eq<!--ke4na9v00ww7pz-->uiva<!--733v0y34j84m11-->lent of Vi<!--d8lkej1ijc-->ag<!--l1sp1bpdx5nn2b-->ra, gi<!--33is6c1g07rrn-->ves yo<!--dz6dud3584t-->u the ex<!--s0sq3v2gejs3p9-->act perfor<!--tyemdf2ip7dd-->mance an<!--kj1d6h19gup4-->d pow<!--tq0u7sw5443-->er
a<!--j9eowx3tc2lf-->s Via<!--zhc4nx2vgpc8-->gra, f<!--nt2gyb145c6i-->or HA<!--95srrx3e8s5-->LF<!--exjx2x1b17s6bt--> TH<!--tistri3u90f9s2-->E C<!--9graelmah5-->OST.</p>
<p>A<!--j9u2d02mfyc-->ct no<!--j5ba7snfkbaw-->w or r<!--k9hk602gqx-->isk mi<!--jyelan1i6ad9-->ssin<!--lpuezo3kmshat3-->g out o<!--7z6oxk2qfg-->n spe<!--3e33lqi5qj7-->cial pro<!--txjsk11ga4q462-->moti<!--reuru62l4ar-->onal p<!--md31mt2tqv94-->ricing - G<!--06c1wu3p4bb2g3-->SC-1<!--b1giif1fox-->00 is pri<!--6xl92k1zpzuez3-->ced
as l<!--zc9ac12hzgef-->ow as <!--pyse6md4ic-->$5.00 pe<!--c0ijq82mhtxeb2-->r 100<!--h5trnp3e4ix-->mg ta<!--9790kp1z40rhi3-->blet, Via<!--6dqszz3fhe-->gra cos<!--lsx32r3cumdr-->ts $1<!--qx1xpdjf242-->2.25 p<!--7z5bv51sy83-->er 100<!--h8gbjz1f1gw8-->mg tab<!--uh7j8c3rff-->let.</p>
<p>Th<!--qdqldk29bgh-->e doc<!--97jizv2pvvrqx2-->tor con<!--x5c1npp7vxe6-->sult<!--nix69a1st7m7-->ation and s<!--a83w35xarr46-->hipping is<!--l603arpz16043q--> free of<!--81dk513491o--> char<!--ouqupl239pn6r-->ge, an<!--ikn16v44onp11t-->d your G<!--sm8l2y10frn-->SC-100 <!--j9wwcf3p4m83s3-->wi<!--stk1462w74-->ll
arriv<!--2piuuu2l8sm-->e a<!--fso5u62210-->t yo<!--ny6hn625160mh3-->ur d<!--tba1at2xohcan1-->oor q<!--x7inr83smzf6-->uickly a<!--n7sm5lorchy-->nd di<!--s764z71owf85r-->scretely. S<!--l1fi6o3bu3jpo1-->imply <a href="http://www.shopwo11.com/host/default.asp?id=yr1">vis<!--b0mzcgre8pxb-->it th<!--a4bzq01q4v0-->e
G<!--03wuo6vnks6tma-->SC-<!--vc4myn1ib9pe-->100 We<!--amhedb28ah1a-->b sit<!--fg8s921as7tk-->e</a> for mo<!--cr85ik2ye2cxau-->re info<!--ps4mja2nmsgjl2-->rmatio<!--81ekypyo1n403g-->n on<!--ulwpekbshpxy--> t<!--z4matz2m20r-->his revo<!--v90jf734co-->lutiona<!--62jhcj33uou-->ry n<!--ye4lo414lryy-->ew pr<!--s843yjjzdi9a-->oduct.</p>
<p align="center"><a href="http://www.greatxzq.com/host/default.asp?id=yr1">Cli<!--anbwsf8859i83-->ck H<!--g9l8s41ozm5-->ere to<!--9iuer612jp--> Vi<!--9weql93dgrs-->sit O<!--apzbsk1lblx-->ur Web<!--f66apx2jtyy3y2-->site</a></p>
<hr><p><a href="http://www.greatxzq.com/host/emailremove.asp"><font size="-1">cli<!--lpjbz7rr4c8vu3-->ck h<!--1pozu2jx22vd3q-->ere t<!--vfrnkr18alol-->o b<!--q3tufvs2vem9x-->e re<!--k5n64z3jkh5st7-->m<!--wdaamh214z8m5-->oved br6app1gnymhj2qgt80w1j9i kmwfa837mp u8sgbz3knou14wphz3u5xcmekz8pfin18v4l qgkposg22si2w49n752wfgr 7typlz10x35ik j7j7d137jjw44i5mx5vfzh6ek2y12bohpqhhkd68b16i31xa3 5opwbw340u94f</font></a></p>
#########
zoals je ziet 1 grote warboel. na elke 1 of 2 letters, stoppen ze er een code ofzo in die genegeerd. omdat die genegeerd wordt, worden de letters door het mailprogramma gewoon achter elkaar geplakt waardoor je de woorden normaal leest.
degenen die dit willen zien kunnen de bovenstaande "code" plakken in notepad en als HTML opslaan.
maar hoe blokkeer je zoiets in godsnaam? bayesian filters kunnen hier ook niet echt mee overweg lijkt me.... ik gebruik al spampal om te checken via DNS blacklist, maar die zijn ook niet altijd even nauwkeurig...
edit: whoops, dat was de layout, word aan gewerkt
*fixed*
het word steeds gekker met de spam die ik ontvang; normaal gesproken word alle spam geblockt dmv keywords enzo, maar ik krijg nu veel spam die niet geblockt wordt, terwijl er wel degelijk keywords in voorkomen die ik geblockt heb.
dus wat doe ik, ik bekijk de bron en ik kom dit tegen:
<div align="center"><!--wpv9903heo4td--><font size="+2"><strong>G<!--qpld7i2b4h05-->ene<!--iov3a32r91rn-->ric Vi<!--9ybtuq3rc9t-->ag<!--9l43cp37l0-->ra </strong></font></div>
<p>Fo<!--6toq5t22an2b82-->r th<!--m9e6iq1d3kfu93-->e fir<!--xd730t27xe-->st tim<!--xcs6i51a2ld-->e ev<!--5ke9il1dfbi-->er, a g<!--wftkeicv49hj-->ener<!--fhr0fr3r1i-->ic ver<!--xb5j2932mz-->sion o<!--o52gypo4isig3-->f V<!--5mi19epcqyv-->iag<!--qltdyy2w29wdx-->ra is a<!--vyy3gs2ymi-->vaila<!--1i5qo8t93n8930-->ble to y<!--t5etb02eb0uz-->ou. G<!--9pxkeo34lyf-->SC-10<!--bj52te2buxnvgl-->0,
th<!--r1ppmnpej12-->e gene<!--dgzvntyvb888-->ric eq<!--ke4na9v00ww7pz-->uiva<!--733v0y34j84m11-->lent of Vi<!--d8lkej1ijc-->ag<!--l1sp1bpdx5nn2b-->ra, gi<!--33is6c1g07rrn-->ves yo<!--dz6dud3584t-->u the ex<!--s0sq3v2gejs3p9-->act perfor<!--tyemdf2ip7dd-->mance an<!--kj1d6h19gup4-->d pow<!--tq0u7sw5443-->er
a<!--j9eowx3tc2lf-->s Via<!--zhc4nx2vgpc8-->gra, f<!--nt2gyb145c6i-->or HA<!--95srrx3e8s5-->LF<!--exjx2x1b17s6bt--> TH<!--tistri3u90f9s2-->E C<!--9graelmah5-->OST.</p>
<p>A<!--j9u2d02mfyc-->ct no<!--j5ba7snfkbaw-->w or r<!--k9hk602gqx-->isk mi<!--jyelan1i6ad9-->ssin<!--lpuezo3kmshat3-->g out o<!--7z6oxk2qfg-->n spe<!--3e33lqi5qj7-->cial pro<!--txjsk11ga4q462-->moti<!--reuru62l4ar-->onal p<!--md31mt2tqv94-->ricing - G<!--06c1wu3p4bb2g3-->SC-1<!--b1giif1fox-->00 is pri<!--6xl92k1zpzuez3-->ced
as l<!--zc9ac12hzgef-->ow as <!--pyse6md4ic-->$5.00 pe<!--c0ijq82mhtxeb2-->r 100<!--h5trnp3e4ix-->mg ta<!--9790kp1z40rhi3-->blet, Via<!--6dqszz3fhe-->gra cos<!--lsx32r3cumdr-->ts $1<!--qx1xpdjf242-->2.25 p<!--7z5bv51sy83-->er 100<!--h8gbjz1f1gw8-->mg tab<!--uh7j8c3rff-->let.</p>
<p>Th<!--qdqldk29bgh-->e doc<!--97jizv2pvvrqx2-->tor con<!--x5c1npp7vxe6-->sult<!--nix69a1st7m7-->ation and s<!--a83w35xarr46-->hipping is<!--l603arpz16043q--> free of<!--81dk513491o--> char<!--ouqupl239pn6r-->ge, an<!--ikn16v44onp11t-->d your G<!--sm8l2y10frn-->SC-100 <!--j9wwcf3p4m83s3-->wi<!--stk1462w74-->ll
arriv<!--2piuuu2l8sm-->e a<!--fso5u62210-->t yo<!--ny6hn625160mh3-->ur d<!--tba1at2xohcan1-->oor q<!--x7inr83smzf6-->uickly a<!--n7sm5lorchy-->nd di<!--s764z71owf85r-->scretely. S<!--l1fi6o3bu3jpo1-->imply <a href="http://www.shopwo11.com/host/default.asp?id=yr1">vis<!--b0mzcgre8pxb-->it th<!--a4bzq01q4v0-->e
G<!--03wuo6vnks6tma-->SC-<!--vc4myn1ib9pe-->100 We<!--amhedb28ah1a-->b sit<!--fg8s921as7tk-->e</a> for mo<!--cr85ik2ye2cxau-->re info<!--ps4mja2nmsgjl2-->rmatio<!--81ekypyo1n403g-->n on<!--ulwpekbshpxy--> t<!--z4matz2m20r-->his revo<!--v90jf734co-->lutiona<!--62jhcj33uou-->ry n<!--ye4lo414lryy-->ew pr<!--s843yjjzdi9a-->oduct.</p>
<p align="center"><a href="http://www.greatxzq.com/host/default.asp?id=yr1">Cli<!--anbwsf8859i83-->ck H<!--g9l8s41ozm5-->ere to<!--9iuer612jp--> Vi<!--9weql93dgrs-->sit O<!--apzbsk1lblx-->ur Web<!--f66apx2jtyy3y2-->site</a></p>
<hr><p><a href="http://www.greatxzq.com/host/emailremove.asp"><font size="-1">cli<!--lpjbz7rr4c8vu3-->ck h<!--1pozu2jx22vd3q-->ere t<!--vfrnkr18alol-->o b<!--q3tufvs2vem9x-->e re<!--k5n64z3jkh5st7-->m<!--wdaamh214z8m5-->oved br6app1gnymhj2qgt80w1j9i kmwfa837mp u8sgbz3knou14wphz3u5xcmekz8pfin18v4l qgkposg22si2w49n752wfgr 7typlz10x35ik j7j7d137jjw44i5mx5vfzh6ek2y12bohpqhhkd68b16i31xa3 5opwbw340u94f</font></a></p>
#########
zoals je ziet 1 grote warboel. na elke 1 of 2 letters, stoppen ze er een code ofzo in die genegeerd. omdat die genegeerd wordt, worden de letters door het mailprogramma gewoon achter elkaar geplakt waardoor je de woorden normaal leest.
degenen die dit willen zien kunnen de bovenstaande "code" plakken in notepad en als HTML opslaan.
maar hoe blokkeer je zoiets in godsnaam? bayesian filters kunnen hier ook niet echt mee overweg lijkt me.... ik gebruik al spampal om te checken via DNS blacklist, maar die zijn ook niet altijd even nauwkeurig...
edit: whoops, dat was de layout, word aan gewerkt
[ Voor 70% gewijzigd door mjszwo op 23-08-2003 18:21 ]