Re: Mime part boundary changingin Image Spam

2006-09-20 Thread Jonas Eckerman
Ben Wylie wrote: I have noticed that a lot of spam messages change their mime boundary during the message. That's not really what happens. The example you included is of nested MIME entities: the top MIME entity is a multipart entity containg another multipart entity. Does this happen in l

Re: Mime part boundary changingin Image Spam

2006-09-20 Thread Theo Van Dinter
On Wed, Sep 20, 2006 at 03:07:46PM +0100, Ben Wylie wrote: > MIME-Version: 1.0 > Content-Type: multipart/related; > type="multipart/alternative"; > boundary="=_NextPart_000_0005_01C6DC77.1B7CF1F0" > > But then the first mime part is empty and changes the mime boundary: > > --=

Mime part boundary changingin Image Spam

2006-09-20 Thread Ben Wylie
I have noticed that a lot of spam messages change their mime boundary during the message. So in the headers they specify something like: MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="=_NextPart_000_0005_01C6DC77.1B7CF1F0" But then