[PLUG-TALK] Obfuscated Spam

Rich Shepard rshepard at appl-ecosys.com
Wed Sep 30 15:23:09 UTC 2009


   If the content transfer encoding of a message is base64 is it reasonable
to assume that it's spam?

   One persistent spammer now has this in the headers of messages that pass
my Postfix filters:

Content-Transfer-Encoding: base64

while legitimate messages have 7bit encoding, if they mention that attribute
at all.

Rich



More information about the PLUG-talk mailing list