You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "John D. Hardin" <jh...@impsec.org> on 2006/11/15 19:27:00 UTC

Linked images in e-mail

On the FuzzyOCR list (devel-spam) there was a question about OCR of
remote images vs. embedded images.

I ased there but didn't think to ask here:

Does SA check URIBLs on IMG tags with remote sources?

e.g. <IMG src="http://known.spammer.com/gibberish.jpg">

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  There is no doubt in my mind that millions of lives could have been
  saved if the people were not "brainwashed" about gun ownership and
  had been well armed. ... Gun haters always want to forget the Warsaw
  Ghetto uprising, which is a perfect example of how a ragtag,
  half-starved group of Jews took 10 handguns and made asses out of
  the Nazis.                        -- Theodore Haas, Dachau Survivor
-----------------------------------------------------------------------


Re: Linked images in e-mail

Posted by decoder <de...@own-hero.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


John D. Hardin wrote:
> On the FuzzyOCR list (devel-spam) there was a question about OCR of
>  remote images vs. embedded images.
>
> I ased there but didn't think to ask here:
>
> Does SA check URIBLs on IMG tags with remote sources?
>
> e.g. <IMG src="http://known.spammer.com/gibberish.jpg">
Yes it seems to do this. I just searched for an email in my spam
folder that was caught by URIBL, took the url, edited another HTML
mail and inserted an "<img src="theurl/blub.jpg"> and then ran it
through SA again. It listed "theurl" in the URIBL results as well :)

Regards,

Chris

>
> -- John Hardin KA7OHZ
> http://www.impsec.org/~jhardin/ jhardin@impsec.org    FALaholic
> #11174     pgpk -a jhardin@impsec.org key: 0xB8732E79 -- 2D8C 34F4
> 6411 F507 136C  AF76 D822 E6E6 B873 2E79
> -----------------------------------------------------------------------
>  There is no doubt in my mind that millions of lives could have
> been saved if the people were not "brainwashed" about gun ownership
> and had been well armed. ... Gun haters always want to forget the
> Warsaw Ghetto uprising, which is a perfect example of how a ragtag,
>  half-starved group of Jews took 10 handguns and made asses out of
> the Nazis.                        -- Theodore Haas, Dachau Survivor
> 
> -----------------------------------------------------------------------
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFW2mvJQIKXnJyDxURAn6sAJ9c4T1y7z7hIOwSE3XgELhZsO1gGACeKxw4
t2XHhoIAE4ZNiYX4d2ZD3hc=
=rJlo
-----END PGP SIGNATURE-----


Re: Linked images in e-mail

Posted by Theo Van Dinter <fe...@apache.org>.
On Wed, Nov 15, 2006 at 10:27:00AM -0800, John D. Hardin wrote:
> Does SA check URIBLs on IMG tags with remote sources?
> e.g. <IMG src="http://known.spammer.com/gibberish.jpg">

Of course.

-- 
Randomly Selected Tagline:
"Was there a category of insurance for having your boat stolen by an
 unded sorcerer while the owner was away attending a demon-inspired posse?
 If so the rate schedule must be interesting."
                                         - C. S.  Friedman, Crown of Shadows