habe vielleicht noch einen Bug gefunden
Der Link- Filter erkennt den enthaltenen Link "http://tallizer.cn/?said=g07b" nicht wenn die Spam- Mail folgendes Format hat:
- Code: Alles auswählen
Return-Path: <eturth@listenlearn.com>
X-Original-To: ABC@ABC.de
Delivered-To: ABC123@AB.ABC.de
Received: from 123-204-81-224.adsl.dynamic.seed.net.tw (123-204-81-224.adsl.dynamic.seed.net.tw [123.104.81.211])
by AB.ABC.de (Postfix) with ESMTP id AE98F609148
for <ABC@ABC.de>; Sun, 7 Jun 2009 15:59:25 +0200 (CEST)
Received: from [192.168.36.39] (port=36275 helo=[127.0.0.1])
by nullmx.listenlearn.com with asmtp
id 7aaff55f480
for ABC@ABC.de; Sun, 07 Jun 2009 13:58:28 +0000
Message-ID: <781FF03F.25504AA@listenlearn.com>
Date: Sun, 07 Jun 2009 13:58:13 +0000
From: Miguel <eturth@listenlearn.com>
User-Agent: Thunderbird 2.0.0.21 (Windows/20090302)
MIME-Version: 1.0
To: ABC@ABC.de
Subject: Hello
Content-Type: multipart/alternative;
boundary="------------040303020804000903040071"
X-Spam: Not detected
X-Mras: Ok
This is a multi-part message in MIME format.
--------------040303020804000903040071
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
225
4443
9130
--------------040303020804000903040071
Content-Type: multipart/related;
boundary="------------030600040002070905864894"
--------------030600040002070905864894
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
</head>
<body bgcolor="#ffffff" text="#000000">
<a href='http://tallizer.cn/?said=g07b'>
<img alt=""
src="cid:part1.00194037.00119602@listenlearn.com"
><br>
<small>
<font color='#ccd$dd1'>
225<br>
4443<br>
9130<br>
</font>
</small>
</a>
</body>
</html>
--------------030600040002070905864894
Content-Type: image/jpeg;
name="lio5.jpg"
Content-Transfer-Encoding: base64
Content-ID: <part1.00194037.00119602@listenlearn.com>
Content-Disposition: inline;
filename="lio5.jpg"
/9j/4AAQSkZJRgABAQEAYABgAAD/2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkS
....
AKKKKACiiigAooooAKKKKAP/2Q==
--------------030600040002070905864894--
--------------040303020804000903040071--
<a href='http://tallizer.cn/?said=g07b'>
Normalerweise müsste es
<a href="http://tallizer.cn/?said=g07b">
mit " " " anstelle von " ' " heissen.
Leider kommen in letzter Zeit gehäuft (bei mir ca. 10-20x) Spam- Mails in diesem Format an.
Gruß,
Frank
(voller Vorfreude)
