You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Justin Mason <jm...@jmason.org> on 2004/08/04 02:44:00 UTC

Re: Syncing domains in email to prevent being seen as "phishing"

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Jeff Chan writes:
> On Tuesday, August 3, 2004, 3:59:33 PM, Douglas Daulton wrote:
> > I am researching a recent problem with some of our double-optin
> > subscriber email.  Customers who subscribe to our email offers are
> > actually getting the email in their inboxes.  However, they are having
> > trouble seeing certain assets, mostly images.  We know this because our
> > customers are emailing us and complaining that their eCoupons are not
> > visible when they receive them.
> 
> > We suspect there are new PC firewalls and SPAM filters that may see our
> > email as "phishing" because the FROM domain (mgg01.net) does not sync
> > with domain of the website from which these assets are pulled
> > (mgmmirage.com).  Can anyone confirm this?   Any light shed on this
> > would be very much appreciated.
> 
> Two suggestions:
> 
> 1.  Don't send images.  Send text with links to a web site with
> the coupons.
> 
> 2.  Serve the images and send the messages from the ***same
> domain*** mgmmirage.com.  Why dilute your brand and scare away
> your customers with an unfamiliar and possibly phishy domain like
> mgg01.net?
> 
> This is a cultural problem that will only get worse as phishing
> becomes more of a problem.  This came up during the discussion at
> the CEAS conference.

Another point is that many mail readers will not display *any* remote
images loaded across the network from <img src> tags inside the message,
due to their widespread use in spam as "web bugs".

If I recall correctly, recent updates to MS Outlook implemented this
change; I think Mozilla and Apple Mail have blocked remote images for much
longer.

I think that may be the problem you're running into -- and it has
very little to do with SpamAssassin ;)

- --j.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFBEDFQQTcbUG5Y7woRAosQAKDAnMinSh2mrDxQqc2qkdxTrDKtdACeM8yj
HB7ZnX8wlFc3bRCraetEKGA=
=ks+A
-----END PGP SIGNATURE-----


Re: Syncing domains in email to prevent being seen as "phishing"

Posted by John Andersen <js...@pen.homeip.net>.
On Tuesday 03 August 2004 04:44 pm, Justin Mason wrote:
> Another point is that many mail readers will not display *any* remote
> images loaded across the network from <img src> tags inside the message,
> due to their widespread use in spam as "web bugs".
>
> If I recall correctly, recent updates to MS Outlook implemented this
> change; I think Mozilla and Apple Mail have blocked remote images for much
> longer.

Yup. Agreed.  

Our policy at work is allow NO REMOTE LOADING.
If someone can't tell us what they want to know, and believe
that we are so stupid we need pictures then we don't want
anything to do with their company. Period.

All of our correspondents are requested to send plain text.
Those who won't don't last long.

Doug, your problem is that you choose to present yourself
and your products (what ever they are) using tools and 
methods that have been abused more than they have
been useful.  People are sick of getting flashy things that look
like web pages when all they want to do is read the mail.

Simple elegance goes a long way.

-- 
_____________________________________
John Andersen