You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2005/08/26 10:17:31 UTC

[Bug 4557] New: new rule for hidden tables detection in spam

http://bugzilla.spamassassin.org/show_bug.cgi?id=4557

           Summary: new rule for hidden tables detection in spam
           Product: Spamassassin
           Version: 3.0.4
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Libraries
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: afk@inbox.ru


New rule HIDDEN_TABLE



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4557] new rule for hidden tables detection in spam

Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4557





------- Additional Comments From felicity@apache.org  2005-08-26 07:53 -------
Subject: Re:  new rule for hidden tables detection in spam

On Fri, Aug 26, 2005 at 01:23:30AM -0700, bugzilla-daemon@bugzilla.spamassassin.org wrote:
> rawbody HIDDEN_TABLE /((cellSpacing|cellPadding|border)\s*\=\s*(3D)?0\s*){3}/i

This rule FPs horribly, fwiw.  Just using pcregrep, in the past month,
639 spam hits and 353 ham hits in my trap mails.





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4557] new rule for hidden tables detection in spam

Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4557





------- Additional Comments From afk@inbox.ru  2005-08-26 01:21 -------
Created an attachment (id=3103)
 --> (http://bugzilla.spamassassin.org/attachment.cgi?id=3103&action=view)
Example spam message with hidden tables




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4557] new rule for hidden tables detection in spam

Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4557





------- Additional Comments From postmaster@jaindrip.com  2005-08-26 06:19 -------
(In reply to comment #2)
> I wrote new rule for detection hidden tables (with bordersize=0 pixels) in 
spam 
> messages
> This is the rule:
> rawbody HIDDEN_TABLE /((cellSpacing|cellPadding|border)\s*\=\s*(3D)?0\s*)
{3}/i

Suggestion
Please note that these type of emails always has Subject: =?iso-8859-1?
add this in your rule.  As I am a newbie please forgive if I am wrong.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4557] new rule for hidden tables detection in spam

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4557


felicity@apache.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX




------- Additional Comments From felicity@apache.org  2006-12-05 11:30 -------
closing due to large number of fps.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4557] new rule for hidden tables detection in spam

Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4557


felicity@apache.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #3103|message/rfc822              |text/plain
          mime type|                            |






------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4557] new rule for hidden tables detection in spam

Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4557





------- Additional Comments From mbr@freebsd.org  2005-08-28 03:14 -------
Created an attachment (id=3107)
 --> (http://bugzilla.spamassassin.org/attachment.cgi?id=3107&action=view)
Ruleset for the obfuscated table spam

Hi,

We've developed a ruleset against those mail which has
no FPS effects. Have fun using it :-)

Martin



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4557] new rule for hidden tables detection in spam

Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4557





------- Additional Comments From afk@inbox.ru  2005-08-26 01:23 -------
I wrote new rule for detection hidden tables (with bordersize=0 pixels) in spam 
messages

This is the rule:

rawbody HIDDEN_TABLE /((cellSpacing|cellPadding|border)\s*\=\s*(3D)?0\s*){3}/i



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.