You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by su...@icconsulting.com.au on 2005/05/10 14:12:12 UTC
smart spam using =2Eco=2Euk
Hi,
this spam jumped through my surbl rules (see below)
They obviously used hex for the .(dot) - smart way to get around surbl.
I am running sa 2.63 (I know, I need to upgrade), but is this likely fixed
in newer releases ?
regards
Scott Farrell
Phone: 02-9411 3622 Mobile: 0412 927 156
http://www.icconsulting.com.au
ic Consulting - helping you with innovation.
We offer e-business consulting and perform services. We deliver high
impact consulting, and fast turn around projects for our clients.
Ask us about Web Content Management, Web Self Service, or working closer
with your customers or suppliers.
--- start spam ---
Received: from colin01 (host217-43-214-162.range217-43.btcentralplus.com
[217.43.214.162])
by icconsulting8.icconsulting.com.au (8.12.8/8.12.8) with
SMTP id j4AArR71029893
for <sf...@icconsulting.com.au>; Tue, 10 May 2005
20:53:30 +1000
Organization: Broadberry
Reply-To: <co...@broadberry.co.uk>
Message-ID: <9f...@colin01>
From: "Colin" <co...@broadberry.co.uk>
To: <sf...@icconsulting.com.au>
Subject: May Madness
Date: Tue, 10 May 2005 11:22:25 +0100
MIME-Version: 1.0
X-MailScanner-From: colin@broadberry.co.uk
Content-Type: multipart/alternative;
boundary="----=NextMime00A_000_169095140D"
This is a multi-part message in MIME format.
------=NextMime00A_000_169095140D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset="windows-1252"
=20
=A0
Workstations Notebooks Rack-Mount Servers Components
Click Here=20
FROM =A3269 =20
Click Here
FROM =A3399
Click Here=20
FROM =A3485 =20
Click Here=20
FROM =A3499
=A0
Prices Exclude VAT & Delivery, Pictures are for illustration purposes
only=
=2E
=A0
=A0=20
Workstations Notebooks Rack-Mount Servers Components
=20
Tel: 020 8997 6000
Fax: 020 8997 0199
Email: sales@broadberry=2Eco=2Euk
Web: www=2Ebroadberry=2Eco=2Euk
If you wish to be removed from this Email List, please email
remove@broadbe=
rry=2Eco=2Euk=20
with the email address that you would like removed=2E
Prices & availability are subject to change without notice=2E Typographic
e=
rrors=20
are subject to correction=2E Any contract made by Broadberry Data Systems
L=
imited=20
is subject to the conditions of sale of Broadberry Data Systems Limited,
a=
=20
copy of which are available on the website www=2Ebroadberry=2Eco=2Euk
=A0
Copyright 1989-2005=A9 Broadberry
------=NextMime00A_000_169095140D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
charset="windows-1252"
<html>
<head>
<title>Workstation Offers From Broadberry</title>
<STYLE TYPE=3D"text/css"><!--
td {font-family: Verdana, Helvetica; font-size:
11px}
A:link {text-decoration: none; color:#000066; font-family:
verda=
na, helvetica}
A:visited {text-decoration: none; color:#000066; font-family:
verda=
na, helvetica}
A:active {text-decoration: none; color:#000066; font-family:
verda=
na, helvetica}
A:hover {text-decoration: underline; color:#FF0000;} =20
--></STYLE></HEAD>
<BODY text=3D#000066 bgColor=3D#003366 leftMargin=3D0 topMargin=3D0
marginw=
idth=3D"0"=20
marginheight=3D"0"><BR>
<TABLE borderColor=3D#000066 cellSpacing=3D0 cellPadding=3D0 width=3D584
al=
ign=3Dcenter=20
bgColor=3D#ffffff border=3D1>
<TBODY>
<TR>
<TD>
<TABLE cellSpacing=3D0 cellPadding=3D0 width=3D600 border=3D0>
<TBODY>
<TR>
<TD width=3D300>
<DIV align=3Dcenter><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/intro=2Ehtml"><IMG
he=
ight=3D77=20
src=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/BDSLogo=2Ejpg"
=
width=3D266=20
border=3D0></A></DIV></TD>
<TD vAlign=3Dtop width=3D300>
<DIV align=3Dright><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/intro=2Ehtml"><IMG
he=
ight=3D98=20
src=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/BDSHeads=2Ejpg"=
width=3D286=20
border=3D0></A></DIV></TD></TR></TBODY></TABLE></TD></TR>
<TR bgColor=3D#003366>
<TD> </TD></TR>
<TR bgColor=3D#003366>
<TD height=3D20>
<TABLE cellSpacing=3D0 cellPadding=3D0 width=3D560 align=3Dcenter
bor=
der=3D0>
<TBODY>
<TR>
<TD width=3D112><FONT face=3D"Verdana, Helvetica"><SPAN><B><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/workstation-em=
ail=2Ehtm"><FONT=20
color=3D#ffffff>Workstations</FONT></A></B></SPAN></FONT></TD>
<TD width=3D112>
<DIV align=3Dcenter><FONT face=3D"Verdana,
Helvetica"><SPAN><B>=
<A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/notebook-email=
=2Ehtm"><FONT=20
color=3D#ffffff>Notebooks</FONT></A></B></SPAN></FONT></DIV></T=
D>
<TD width=3D112>
<DIV align=3Dcenter><FONT face=3D"Verdana,
Helvetica"><SPAN><B>=
<A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/rackmount-emai=
l=2Ehtm"><FONT=20
color=3D#ffffff>Rack-Mount</FONT></A></B></SPAN></FONT></DIV></=
TD>
<TD width=3D112>
<DIV align=3Dcenter><FONT face=3D"Verdana,
Helvetica"><SPAN><B>=
<A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/servers-email=
=2Ehtm"><FONT=20
color=3D#ffffff>Servers</FONT></A></B></SPAN></FONT></DIV></TD>
<TD width=3D112>
<DIV align=3Dright><FONT face=3D"Verdana,
Helvetica"><SPAN><B><=
A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/components/"><FONT=20
color=3D#ffffff>Components</FONT></A></B></SPAN></FONT></DIV></=
TD></TR></TBODY></TABLE>
<DIV align=3Dcenter></DIV></TD></TR>
<TR>
<TD height=3D247>
<DIV align=3Dcenter>
<TABLE height=3D188 cellSpacing=3D0 cellPadding=3D0 width=3D575
borde=
r=3D0>
<TBODY>
<TR>
<TD width=3D286 height=3D299>
<DIV align=3Dcenter>
<P><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/workstation-em=
ail=2Ehtm"><IMG=20
height=3D176 src=3D"http://www=2Ebroadberry=2Eco=2Euk/img/pc1=
=2Ejpg" width=3D249=20
border=3D0></A><BR><B><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/workstation-em=
ail=2Ehtm">Click=20
Here </A></B></P>
<P><B><FONT size=3D2><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/workstation-em=
ail=2Ehtm"><FONT=20
color=3D#ff0000>FROM
=A3269</FONT></A></FONT></B></P></DIV></TD>
<TD width=3D289 height=3D299>
<DIV align=3Dcenter>
<P><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/rackmount-emai=
l=2Ehtm"><IMG=20
height=3D90
src=3D"http://www=2Ebroadberry=2Eco=2Euk/img/tyan_g=
x28b2882=2Ejpg"=20
width=3D270 border=3D0></A></P>
<P><B><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/rackmount-emai=
l=2Ehtm">Click=20
Here</A></B></P>
<P><B><FONT size=3D2><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/rackmount-emai=
l=2Ehtm"><FONT=20
color=3D#ff0000>FROM
=A3399</FONT></A></FONT></B></P></DIV></TD=
></TR>
<TR>
<TD width=3D286 height=3D290>
<DIV align=3Dcenter>
<P><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/notebook-email=
=2Ehtm"><IMG=20
height=3D158
src=3D"http://www=2Ebroadberry=2Eco=2Euk/img/FIC_M=
B05=2Ejpg"=20
width=3D180 border=3D0></A></P>
<P><B><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/notebook-email=
=2Ehtm">Click=20
Here </A></B></P>
<P><B><FONT size=3D2><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/notebook-email=
=2Ehtm"><FONT=20
color=3D#ff0000>FROM
=A3485</FONT></A></FONT></B></P></DIV></TD>
<TD width=3D289 height=3D290>
<DIV align=3Dcenter>
<P><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/servers-email=
=2Ehtm"><IMG=20
height=3D175
src=3D"http://www=2Ebroadberry=2Eco=2Euk/img/serve=
r1=2Ejpg"=20
width=3D175 border=3D0></A></P>
<P><B><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/servers-email=
=2Ehtm">Click=20
Here </A></B></P>
<P><B><FONT size=3D2><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/servers-email=
=2Ehtm"><FONT=20
color=3D#ff0000>FROM=20
=A3499</FONT></A></FONT></B></P></DIV></TD></TR></TBODY></TABLE><IMG=
=20
height=3D60
src=3D"http://www=2Ebroadberry=2Eco=2Euk/img/Intel_set=2E=
jpg"=20
width=3D220></DIV></TD></TR>
<TR bgColor=3D#003366>
<TD> </TD></TR>
<TR>
<TD height=3D19>
<DIV align=3Dcenter>Prices Exclude VAT & Delivery, Pictures are
f=
or=20
illustration purposes only=2E</DIV></TD></TR>
<TR bgColor=3D#003366>
<TD> </TD></TR>
<TR>
<TD height=3D19> </TD></TR>
<TR bgColor=3D#003366>
<TD height=3D20>
<TABLE cellSpacing=3D0 cellPadding=3D0 width=3D560 align=3Dcenter
bor=
der=3D0>
<TBODY>
<TR>
<TD width=3D112><FONT face=3D"Verdana, Helvetica"><SPAN><B><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/workstation-em=
ail=2Ehtm"><FONT=20
color=3D#ffffff>Workstations</FONT></A></B></SPAN></FONT></TD>
<TD width=3D112>
<DIV align=3Dcenter><FONT face=3D"Verdana,
Helvetica"><SPAN><B>=
<A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/notebook-email=
=2Ehtm"><FONT=20
color=3D#ffffff>Notebooks</FONT></A></B></SPAN></FONT></DIV></T=
D>
<TD width=3D112>
<DIV align=3Dcenter><FONT face=3D"Verdana,
Helvetica"><SPAN><B>=
<A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/rackmount-emai=
l=2Ehtm"><FONT=20
color=3D#ffffff>Rack-Mount</FONT></A></B></SPAN></FONT></DIV></=
TD>
<TD width=3D112>
<DIV align=3Dcenter><FONT face=3D"Verdana,
Helvetica"><SPAN><B>=
<A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/servers-email=
=2Ehtm"><FONT=20
color=3D#ffffff>Servers</FONT></A></B></SPAN></FONT></DIV></TD>
<TD width=3D112>
<DIV align=3Dright><FONT face=3D"Verdana,
Helvetica"><SPAN><B><=
A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/components/"><FONT=20
color=3D#ffffff>Components</FONT></A></B></SPAN></FONT></DIV></=
TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD>
<TABLE cellSpacing=3D0 cellPadding=3D0 width=3D560 align=3Dcenter
bor=
der=3D0>
<TBODY>
<TR>
<TD colSpan=3D3 height=3D90>
<DIV align=3Dcenter><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/intro=2Ehtml"><IMG
he=
ight=3D77=20
src=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/BDSLogo=2Ejpg"
=
width=3D266=20
border=3D0></A></DIV></TD>
<TD width=3D240 height=3D90>
<TABLE cellSpacing=3D0 cellPadding=3D0 width=3D220 border=3D0>
<TBODY>
<TR>
<TD width=3D52><SPAN>Tel:</SPAN></TD>
<TD width=3D168><SPAN><B>020 8997
6000</B></SPAN></TD></TR>
<TR>
<TD width=3D52><SPAN>Fax:</SPAN></TD>
<TD width=3D168><SPAN><B>020 8997
0199</B></SPAN></TD></TR>
<TR>
<TD width=3D52><SPAN>Email:</SPAN></TD>
<TD width=3D168><SPAN><B><A
href=3D"mailto:sales@broadberry=
=2Eco=2Euk">sales@broadberry=2Eco=2Euk</A></B></SPAN></TD></TR>
<TR>
<TD width=3D52><SPAN>Web:</SPAN></TD>
<TD width=3D168><SPAN><B><A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/intro=2Ehtml">w=
ww=2Ebroadberry=2Eco=2Euk</A></B></SPAN></TD></TR></TBODY></TABLE><SPAN></S=
PAN></TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD>
<TABLE cellSpacing=3D0 cellPadding=3D0 width=3D560 align=3Dcenter
bgC=
olor=3D#ffffff=20
border=3D0>
<TBODY>
<TR vAlign=3Dbottom>
<TD bgColor=3D#ffffcc height=3D20>
<DIV align=3Dcenter><SPAN><FONT face=3D"Verdana, Helvetica">If
=
you wish=20
to be removed from this Email List, please email <A
href=3D"mai=
lto:remove@broadberry=2Eco=2Euk">remove@broadberry=2Eco=2Euk</A>=20
with the email address that you would like
removed=2E</FONT></S=
PAN>=20
</DIV></TD></TR>
<TR>
<TD>
<HR noShade SIZE=3D1>
</TD></TR>
<TR vAlign=3Dtop>
<TD height=3D20>
<DIV align=3Dcenter><FONT=20
face=3D"Verdana,
Helvetica"></FONT></DIV></TD></TR></TBODY></TABLE>=
</TD></TR></TBODY></TABLE>
<DIV align=3Dcenter><BR>
<TABLE cellSpacing=3D0 cellPadding=3D0 width=3D600 border=3D0>
<TBODY>
<TR>
<TD>
<P align=3Djustify><FONT face=3D"Verdana, Helvetica"
color=3D#ffffff>=
Prices=20
& availability are subject to change without notice=2E
Typographi=
c=20
errors are subject to correction=2E Any contract made by Broadberry
D=
ata=20
Systems Limited is subject to the <A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/broadberry_terms=2Epdf"><FO=
NT=20
color=3D#ffffff>conditions of sale</FONT></A> of Broadberry Data
Syst=
ems=20
Limited, a copy of which are available on the website <A=20
href=3D"http://www=2Ebroadberry=2Eco=2Euk/intro=2Ehtml"><FONT=20
color=3D#ffffff>www=2Ebroadberry=2Eco=2Euk</FONT></A></FONT><FONT=20
face=3D"Verdana, Helvetica" color=3D#ffffff> </FONT></P></TD></TR>
<TR>
<TD> </TD></TR>
<TR>
<TD>
<DIV align=3Dcenter><FONT face=3D"Verdana, Helvetica"=20
color=3D#ffffff><B>Copyright 1989-2005=A9=20
Broadberry</B></FONT></DIV></TD></TR></TBODY></TABLE><BR></DIV>
</BODY>
</html>
------=NextMime00A_000_169095140D--
Re: smart spam using =2Eco=2Euk
Posted by Jeff Chan <je...@surbl.org>.
On Tuesday, May 10, 2005, 5:12:12 AM, sub sub wrote:
> Hi,
> this spam jumped through my surbl rules (see below)
> They obviously used hex for the .(dot) - smart way to get around surbl.
> I am running sa 2.63 (I know, I need to upgrade), but is this likely fixed
> in newer releases ?
My SA 2.64 with SpamCopURI correctly parses this as:
debug: checking url: http://www.broadberry.co.uk
But broadberry.co.uk is not blacklisted in SURBLs.
You can locally blacklist hosts with SpamCopURI by using conf
file entries like:
blacklist_spamcop_uri broadberry.co.uk
Cheers,
Jeff C.
> --- start spam ---
[...]
> <DIV align=3Dcenter><A=20
> href=3D"http://www=2Ebroadberry=2Eco=2Euk/intro=2Ehtml"><IMG
> he=
> ight=3D77=20
> src=3D"http://www=2Ebroadberry=2Eco=2Euk/offers/BDSLogo=2Ejpg"
> =
> width=3D266=20
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/