[91639] in North American Network Operators' Group
RE: ISP wants to stop outgoing web based spam
daemon@ATHENA.MIT.EDU (Barry Shein)
Wed Aug 9 14:18:57 2006
From: Barry Shein <bzs@world.std.com>
Date: Wed, 9 Aug 2006 14:15:40 -0400
To: Jeroen Massar <jeroen@unfix.org>
Cc: "Mills, Charles" <cmills@accessdc.com>, Nanog <nanog@merit.edu>
In-Reply-To: <1155131992.15734.4.camel@firenze.zurich.ibm.com>
Errors-To: owner-nanog@merit.edu
I think what was being talked about was that a lot of spam now comes
as embedded images which unpack into ads for the usual stuff. It's
actually been going on for a few years but I guess as the other stuff
gets more and more effectively blocked this form becomes more salient.
Thus far I don't know of any good filter for these.
Common spam software seems to rotate or vary these slightly so it's
not as simple as comparing to one you've seen before. Since the image
formats are compressed, usually gif, tiny changes can ripple through
the entire encoding.
--
-Barry Shein
The World | bzs@TheWorld.com | http://www.TheWorld.com
Purveyors to the Trade | Voice: 800-THE-WRLD | Login: Nationwide
Software Tool & Die | Public Access Internet | SINCE 1989 *oo*
