New User? Need help? Click here to register for free! Registering removes the advertisements.

Computer Cops
image image image image image image image image
Donations
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
image
Prime Choice
· Head Lines
· Advisories (All)
· Dnld of the Week!
· CCSP News Ltrs
· Find a Cure!

· Ian T's (AR 23)
· Marcia's (CO8)
· Bill G's (CO12)
· Paul's (AR 5)
· Robin's (AR 2)

· Ian T's Archive
· Marcia's Archive
· Bill G's Archive
· Paul's Archive
· Robin's Archive
image
Security Central
· Home
· Wireless
· Bookmarks
· CLSID
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· RegChat
· Reviews
· Google Search
· Sections
· Software
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Survey
How much can you give to keep Computer Cops online?

$10 up to $25 per year?
$25 up to $50 per year?
$10 up to $25 per month?
$25 up to $50 per month?
More than $50 per year?
More than $50 per month?
One time only?
Other (please comment)



Results
Polls

Votes: 1130
Comments: 21
image
Translate
English German French
Italian Portuguese Spanish
Chinese Greek Russian
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin 

Wishlist Item - Option to Strip Phony HTML Tags
Goto page 1, 2  Next
 
Post new topic   Reply to topic       Computer Cops Forum Index -> Benign - Suggestions
View previous topic :: View next topic  
Author Message
Rob LIndauer

Guest






PostPosted: Fri Jan 02, 2004 8:53 am    Post subject: Wishlist Item - Option to Strip Phony HTML Tags
Reply with quote

I'd like to see a B9 option to strip unrecognized html tags from messages.

For example, spammers have taken to inserting phony HTML tags (e.g., <JRELW> and </JRELW>) into their messages to break up "trigger" words so that antispam programs don't recognize the words.

Since I feed B9's output to my antispam program, this capability would permit my antispam program to recognize more spam messages. (I'm using McAffee on one machine, Mailwasher Pro on another - both are fooled by the phony tags.)

Thanks!
Back to top
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3531
Location: Canada

PostPosted: Fri Jan 02, 2004 12:30 pm    Post subject:
Reply with quote

IMO, B9 should focus on cleaning up legit messages. That's not to say that MWP shouldn't allow me to filter on the stripped message. However I'm finding that the phony tags inserted into messages is a better SPAM "fingerprint" than the actual words used. Wink
_________________
I like SPAM ... on my sandwich!
Back to top
View users profile Send private message Send email
rusticdog

Site Moderator
Site Moderator
Premium Member
Premium Member


Joined: Aug 12, 2002
Posts: 2570
Location: New_Zealand

PostPosted: Mon Jan 05, 2004 11:07 pm    Post subject:
Reply with quote

Quote:
I'd like to see a B9 option to strip unrecognized html tags from messages.


This option is present.

From B9 click Options >> select Security Profiles at the top >> be sure from the drop down list of the different security profiles, your chosen profile for the account is selected >> select HTML on the left >> the option is "Remove non-standard HTML tags/or attributes
Back to top
View users profile Send private message Send email Visit posters website MSN Messenger
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3531
Location: Canada

PostPosted: Tue Jan 06, 2004 2:11 am    Post subject:
Reply with quote

Ok but then my question is, "why would I have to strip anything like that out of legit messages?"

And a followon, "Why can't I find out immediately that I've accepted such a message and which message it was?"

_________________
I like SPAM ... on my sandwich!
Back to top
View users profile Send private message Send email
rusticdog

Site Moderator
Site Moderator
Premium Member
Premium Member


Joined: Aug 12, 2002
Posts: 2570
Location: New_Zealand

PostPosted: Tue Jan 06, 2004 2:17 am    Post subject:
Reply with quote

Six good reasons why HTML is bad...http://forum.gladiator-antivirus.com/index.php?showtopic=3098

Quote:
And a followon, "Why can't I find out immediately that I've accepted such a message and which message it was?"


I don't follow you on that one
Back to top
View users profile Send private message Send email Visit posters website MSN Messenger
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3531
Location: Canada

PostPosted: Tue Jan 06, 2004 3:02 am    Post subject:
Reply with quote

rusticdog wrote:
Six good reasons why HTML is bad...http://forum.gladiator-antivirus.com/index.php?showtopic=3098


Yeah, yeah. HTML is bad. Luddites! Razz I trust B9 is doing it's best to protect me from all that "badness".

Anyway ... Calamity Jane eh? ... Now where have I heard that name before? .... hmmmm .....

Seriously though, very good points. ... Then again, I didn't see anything about unrecognized HTML tags... Confused

rusticdog wrote:
Quote:
And a followon, "Why can't I find out immediately that I've accepted such a message and which message it was?"


I don't follow you on that one

Well, as it stands, B9 "fixes" messages without any sort of alert other than the message log indicators. These "flags" hardly jump up saying "Hey big guy, so-and-so's pulling your chain!"

_________________
I like SPAM ... on my sandwich!
Back to top
View users profile Send private message Send email
rusticdog

Site Moderator
Site Moderator
Premium Member
Premium Member


Joined: Aug 12, 2002
Posts: 2570
Location: New_Zealand

PostPosted: Tue Jan 06, 2004 3:14 am    Post subject:
Reply with quote

No, there's no need to panic either if the alteration to the email is a simple tidy up, or cautionary removal of script.

In saying that we acknowledge that there is insufficient information provided by B9 as to what alterations to the email have been made, this will be addressed later this year.

Is alerts something you and anyone else reading this wayward post would want ?
Back to top
View users profile Send private message Send email Visit posters website MSN Messenger
Wayward

Lieutenant
Lieutenant
Premium Member
Premium Member


Joined: Mar 16, 2003
Posts: 299
Location: USA

PostPosted: Tue Jan 06, 2004 11:36 pm    Post subject:
Reply with quote

rusticdog wrote:
Is alerts something you and anyone else reading this wayward post would want ?

Wayward post, indeed! Wink

Personally, I have enough alerts in my life. Benign silently doing its job is fine with me. I can dig for a little more detail if I feel the need.

BTW, the six HTML points are excellent and right on point. E-mail was intended to be text. Rolling Eyes

_________________
Wayward
Back to top
View users profile Send private message
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3531
Location: Canada

PostPosted: Wed Jan 07, 2004 12:55 am    Post subject:
Reply with quote

Wayward wrote:
Personally, I have enough alerts in my life. Benign silently doing its job is fine with me. I can dig for a little more detail if I feel the need.

Try it sometime. First step is to notice something is "off". Not easily noticed even when looking through the logs. OK say you happen to pick out an email that has a missing graphic and you want to find out whether B9 removed it and why and assess what that might mean about the party from whom you accepted the message.

Next step then is to find the blasted message in the log. Now when you manage to find it and look at the log info .... exactly what was it about the graphic that led to it's demise? What import do any other message modifications have?

I've sent a couple of companies nicely worded letters asking them to cease and desist with their marketing practices that load their graphics with something B9 doesn't like. One responded that it must be some one else's cookie that causes this. I doubt that but I have no idea how to prove that it's their doing.

Wayward wrote:
BTW, the six HTML points are excellent and right on point. E-mail was intended to be text. Rolling Eyes

A bit of satire? Otherwise why bother with B9 --- just accept only the text....

_________________
I like SPAM ... on my sandwich!
Back to top
View users profile Send private message Send email
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3531
Location: Canada

PostPosted: Fri Jan 09, 2004 11:35 pm    Post subject:
Reply with quote

BTW Wayward, I should have mentioned that it's hard enough finding the messages without a search option, they aren't sortable either! They aren't even sorted chronologically by default!

Just tonight I was looking for the record for a message I received today that had some attachments removed. Knowing it was one of the last few received, you'd figure it should be near the top of the list right? Nope. I had to page down until I found today's messages all grouped together.

To add insult to injury, the log only said that three files had been removed. No reason, just that they were removed. No indication of size, attachment type, that sort of thing.

Just an illustration of my point. If you actually want to use the logs, they are, to put it bluntly, pretty useless.

_________________
I like SPAM ... on my sandwich!
Back to top
View users profile Send private message Send email
Wayward

Lieutenant
Lieutenant
Premium Member
Premium Member


Joined: Mar 16, 2003
Posts: 299
Location: USA

PostPosted: Sat Jan 10, 2004 12:32 am    Post subject:
Reply with quote

Ikeb wrote:
BTW Wayward, I should have mentioned that it's hard enough finding the messages without a search option, they aren't sortable either! They aren't even sorted chronologically by default!

Arrow Correct. The ability to search and sort is not available. It has been suggested a number of times and, hopefully, is on the radar screen for future enhancements.

Ikeb wrote:
Just tonight I was looking for the record for a message I received today that had some attachments removed. Knowing it was one of the last few received, you'd figure it should be near the top of the list right? Nope. I had to page down until I found today's messages all grouped together.

Arrow Just today, Benign changed the name of an Excel spreadsheet file from myfile.xls to myfile._xls. As a matter of curiosity, I went to the Benign log to find the message record. Not a major problem and the name change was confirmed. Certainly, it would be easier with search and sort capability.

Ikeb wrote:
To add insult to injury, the log only said that three files had been removed. No reason, just that they were removed. No indication of size, attachment type, that sort of thing.

Fortunately, I haven't encountered this specific problem. Perhaps your attachments are different from my attachments.

As a side note, my ISP uses MIMEDefang from Roaring Penguin to check incoming attachments. From time to time I have received a message that MIMEDefang has removed a potentially harmful attachment and suggests that I contact the sender to request the attachment in a different format. In every case, the removed attachment turned out to be from a virus or Trojan infected computer.

Arrow Personally, I don't mind dealing with a little inconvenience from MIMEDefang or from Benign ... pending further Benign enhancements. Your mileage may vary.

Ikeb wrote:
Just an illustration of my point. If you actually want to use the logs, they are, to put it bluntly, pretty useless.

Arrow The program is very useful. The logs are much less useful ... but usable. Search and sort would be a great enhancement and I certainly encourage this enhancement for a future release.

_________________
Wayward
Back to top
View users profile Send private message
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3531
Location: Canada

PostPosted: Sat Jan 10, 2004 1:43 am    Post subject:
Reply with quote

Obviously I use B9 as well. In fact I wouldn't want to be without it. I'm limiting my criticism to the logs, which in my mind are inferior and do a disservice to the product. I also see the inability to effectively analyze and quickly find out if a message needs further attention as an area where the product could be improved.

Standing back from this a bit, it's been many months since there's been any sort of B9 upgrade. Based on the lack of demand for changes, why would FireTrust change anything? Take this topic for instance. Only two of us bothered to respond to RD's question above and while one of us is being somewhat vocal about the need for a change, the other's tone is rather less urgent. I know if I were a FireTrust product manager, I'd take that as an indication that any change can wait until some unspecified future date when there's more of a demonstrated need for change.

_________________
I like SPAM ... on my sandwich!
Back to top
View users profile Send private message Send email
rusticdog

Site Moderator
Site Moderator
Premium Member
Premium Member


Joined: Aug 12, 2002
Posts: 2570
Location: New_Zealand

PostPosted: Sat Jan 10, 2004 5:41 pm    Post subject:
Reply with quote

Great. We do have a list of changes to be making to B9 later in the year, and I feel that what we've come up with relates well to what you are saying.

Chnages to B9 though are on hold, once we have MW to a point of satisfaction the priorities will shift to B9
Back to top
View users profile Send private message Send email Visit posters website MSN Messenger
Wayward

Lieutenant
Lieutenant
Premium Member
Premium Member


Joined: Mar 16, 2003
Posts: 299
Location: USA

PostPosted: Sat Jan 10, 2004 6:02 pm    Post subject:
Reply with quote

rusticdog,

Arrow That goes along with my thinking. While I would like to have everything right now, I understand there must be some development resource and priority considerations on both your end and the user end.

Arrow In considering my personal needs, MailWasher Pro is at the top of the list. FirstAlert! is next and Benign pulling in at a very strong third. I can live with some of the current Benign stuff as long as there is good progress on all of the products.

Just get it all done as fast as you can. Wink

_________________
Wayward
Back to top
View users profile Send private message
Eisenson

Corporal
Corporal
Premium Member
Premium Member


Joined: May 22, 2004
Posts: 59
Location: USA

PostPosted: Tue May 25, 2004 4:48 pm    Post subject:
Reply with quote

OK...
So I understand that B9 will compress emails into text, removing spurious (anti-antispam) html?

I'm buying B9 immediately to go with my 90% satisfactory MWP! This pair just might get the job done.

_________________
Perfection is sometimes sufficient...
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       Computer Cops Forum Index -> Benign - Suggestions All times are GMT - 5 Hours
Goto page 1, 2  Next
Page 1 of 2

 
 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8a © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops