Re: [SPAM-TAG] Re: [SPAM-TAG] Content type allowing spammers to evade URIBL

[Jeff Chan <je...@surbl.org>]

On Thursday, May 5, 2005, 12:10:32 AM, Jeff Chan wrote:
> On Wednesday, May 4, 2005, 9:21:11 PM, Craig Baird wrote:
>> Today, I've received a number of spams containing a domain that is listed on 
>> almost all the SURBL lists.  I've recieved around 10 of these today, and none 
>> of them have hit on any of the SURBLs despite the domain being listed.  Here 
>> is the message:

[...]
>> ----09-5[5]-3237-7[3]-087[3]
>> Content-Type: ;text/plain;

[...]

>> If you'll notice, the content type is shown as ";text/plain;".  It seems that 
>> the semicolons are causing Spamassassin not to parse the mail properly.  If I 
>> run the message through SA as-is, it hits on no SURBLs.  However, if I remove 
>> the semicolons, and run it again, it hits on all the SURBLs.  Needless to say, 
>> it would seem some sneaky spammer has found another loophole...

>> Craig

> SA devs, should this get a bugzilla?

> Jeff C.

BTW I can duplicate Craig's results.

Jeff C.
-- 
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/