This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
faq:pseudowords [2008/02/08 18:49] – external edit 127.0.0.1 | faq:pseudowords [2013/11/05 13:58] (current) – external edit 127.0.0.1 | ||
---|---|---|---|
Line 21: | Line 21: | ||
! XXX can be any kind of header that might or should be used in an email, e.g, Date:, Subject:, but also less common ones such as Precedence: or List-Unsubscribe. | ! XXX can be any kind of header that might or should be used in an email, e.g, Date:, Subject:, but also less common ones such as Precedence: or List-Unsubscribe. | ||
? html: | ? html: | ||
- | | + | |
? html: | ? html: | ||
! marks the background color of a html message. | ! marks the background color of a html message. | ||
Line 27: | Line 27: | ||
! gets set when a message uses low contrast between foreground and background. Possibly to hide certain words. | ! gets set when a message uses low contrast between foreground and background. Possibly to hide certain words. | ||
? html: | ? html: | ||
- | ! HTML comments can be used to hide words from dumb filters, while users get to see them just fine: VIA< | + | ! HTML comments can be used to hide words from dumb filters, while users get to see them just fine:\\ |
+ | VIA< | ||
? html:cidsrc | ? html:cidsrc | ||
! image source referencing an attachment by its cid | ! image source referencing an attachment by its cid | ||
Line 57: | Line 58: | ||
! This one works just like the comment trick. Instead of placing a comment inside a word, spammers use invalid (thought up) html tags inside the word. The effect is the same. | ! This one works just like the comment trick. Instead of placing a comment inside a word, spammers use invalid (thought up) html tags inside the word. The effect is the same. | ||
? html: | ? html: | ||
- | ! is set when a message contains a html numeric entity, like & | + | ! is set when a message contains a html numeric entity, like & |
? html:td | ? html:td | ||
! this one keeps track of the number of html table cells in an email. Usually, emails are just paragraphs of text. When they contain tables and when those tables contain many cells, something different may be going on. | ! this one keeps track of the number of html table cells in an email. Usually, emails are just paragraphs of text. When they contain tables and when those tables contain many cells, something different may be going on. | ||
Line 65: | Line 66: | ||
! If a message has a mime-encoded attachment, POPFile stores the file name of the attachment in this pseudoword. | ! If a message has a mime-encoded attachment, POPFile stores the file name of the attachment in this pseudoword. | ||
? spamassassin:< | ? spamassassin:< | ||
- | ! SpamAssassin tests | + | |
? spamassassinlevel: | ? spamassassinlevel: | ||
- | ! counted once for every full point of SpamAssassin level | + | ! counted once for every full point of %%SpamAssassin%% level |
? subject:< | ? subject:< | ||
! words found in the Subject header | ! words found in the Subject header | ||
Line 73: | Line 74: | ||
! names and addresses in the To header | ! names and addresses in the To header | ||
? trick: | ? trick: | ||
- | ! this gets set when a string is broken up by spaces or other random characters between the characters of a word. eg: | + | ! this gets set when a string is broken up by spaces or other random characters between the characters of a word.\\ |
+ | eg: | ||
? trick: | ? trick: | ||
! this is a fairly simple trick where words have dots in random places. eg: Mort.gage | ! this is a fairly simple trick where words have dots in random places. eg: Mort.gage | ||
Line 81: | Line 83: | ||
- | More information about spammer trickery that underlies some of these pseudowords can be found in [[http:// | + | More information about spammer trickery that underlies some of these pseudowords can be found in [[http:// |
=== See also === | === See also === | ||
* [[Glossary: | * [[Glossary: | ||
- |
Should you find anything in the documentation that is incomplete, unclear, outdated or just plain wrong, please let us know and leave a note in the Documentation Forum.