Re: HTML Source Rule

2006-12-05 Thread Richard Frovarp
Kenneth Porter wrote: On Thursday, November 30, 2006 5:01 PM -0600 Richard Frovarp <[EMAIL PROTECTED]> wrote: Kenneth Porter wrote: --On Wednesday, November 29, 2006 5:17 PM -0600 Richard Frovarp <[EMAIL PROTECTED]> wrote: I have a few legit messages that are scoring over 5.0 due to SARE_ST

Re: HTML Source Rule

2006-11-30 Thread Kenneth Porter
On Thursday, November 30, 2006 5:01 PM -0600 Richard Frovarp <[EMAIL PROTECTED]> wrote: Kenneth Porter wrote: --On Wednesday, November 29, 2006 5:17 PM -0600 Richard Frovarp <[EMAIL PROTECTED]> wrote: I have a few legit messages that are scoring over 5.0 due to SARE_STOCKS and the TVD rules

Re: HTML Source Rule

2006-11-29 Thread Matt Kettler
Bob Newhart wrote: > Hello, I was wondering if there is a way to write a rule for HTML > source code contained in an email. Use rawbody as the rule type. This will match the text after decoding (ie: base64) and line-wrap removal, but before HTML tags are removed.

Re: HTML Source Rule

2006-11-29 Thread Kenneth Porter
--On Wednesday, November 29, 2006 5:17 PM -0600 Richard Frovarp <[EMAIL PROTECTED]> wrote: I have a few legit messages that are scoring over 5.0 due to SARE_STOCKS and the TVD rules to catch stocks, and this is after ALL_TRUSTED has done its work to reduce the score. These messages of course ha

Re: HTML Source Rule

2006-11-29 Thread Richard Frovarp
Bret Miller wrote: Hello, I was wondering if there is a way to write a rule for HTML source code contained in an email. I am getting many of these "Buy This Stock" emails and I am finding that the pictures contained in them all have a portion of a line of source that says... src="cid: Thanks in

Re: HTML Source Rule

2006-11-29 Thread Loren Wilton
This Stock" emails and I am finding that the pictures contained in them all have a portion of a line of source that says... src="cid: *ANY* inline image of any sort is going to contain that tag. That is what links to the other mime section containing the image. There are quite a number of r

Re: HTML Source Rule

2006-11-29 Thread Kelson
Bret Miller wrote: pictures contained in them all have a portion of a line of source that says... src="cid: Thanks in advance for any help anyone may be able to provide. So does every message sent from Outlook that includes an image. I'd suspect that you'd end up rejecting a lot of legitimat

RE: HTML Source Rule

2006-11-29 Thread Bret Miller
> Hello, I was wondering if there is a way to write a rule for > HTML source code contained in an email. I am getting many of > these "Buy This Stock" emails and I am finding that the > pictures contained in them all have a portion of a line of > source that says... > > src="cid: > > Thanks in adva

HTML Source Rule

2006-11-29 Thread Bob Newhart
Hello, I was wondering if there is a way to write a rule for HTML source code contained in an email. I am getting many of these "Buy This Stock" emails and I am finding that the pictures contained in them all have a portion of a line of source that says... src="cid: Thanks in advance for any hel