Kenneth Porter wrote:
On Thursday, November 30, 2006 5:01 PM -0600 Richard Frovarp
<[EMAIL PROTECTED]> wrote:
Kenneth Porter wrote:
--On Wednesday, November 29, 2006 5:17 PM -0600 Richard Frovarp
<[EMAIL PROTECTED]> wrote:
I have a few legit messages that are scoring over 5.0 due to
SARE_ST
On Thursday, November 30, 2006 5:01 PM -0600 Richard Frovarp
<[EMAIL PROTECTED]> wrote:
Kenneth Porter wrote:
--On Wednesday, November 29, 2006 5:17 PM -0600 Richard Frovarp
<[EMAIL PROTECTED]> wrote:
I have a few legit messages that are scoring over 5.0 due to
SARE_STOCKS and the TVD rules
Bob Newhart wrote:
> Hello, I was wondering if there is a way to write a rule for HTML
> source code contained in an email.
Use rawbody as the rule type. This will match the text after decoding
(ie: base64) and line-wrap removal, but before HTML tags are removed.
--On Wednesday, November 29, 2006 5:17 PM -0600 Richard Frovarp
<[EMAIL PROTECTED]> wrote:
I have a few legit messages that are scoring over 5.0 due to SARE_STOCKS
and the TVD rules to catch stocks, and this is after ALL_TRUSTED has done
its work to reduce the score. These messages of course ha
Bret Miller wrote:
Hello, I was wondering if there is a way to write a rule for
HTML source code contained in an email. I am getting many of
these "Buy This Stock" emails and I am finding that the
pictures contained in them all have a portion of a line of
source that says...
src="cid:
Thanks in
This Stock" emails and I am finding that the pictures contained in
them all have a portion of a line of source that says...
src="cid:
*ANY* inline image of any sort is going to contain that tag. That is what
links to the other mime section containing the image.
There are quite a number of r
Bret Miller wrote:
pictures contained in them all have a portion of a line of
source that says...
src="cid:
Thanks in advance for any help anyone may be able to provide.
So does every message sent from Outlook that includes an image. I'd
suspect that you'd end up rejecting a lot of legitimat
> Hello, I was wondering if there is a way to write a rule for
> HTML source code contained in an email. I am getting many of
> these "Buy This Stock" emails and I am finding that the
> pictures contained in them all have a portion of a line of
> source that says...
>
> src="cid:
>
> Thanks in adva
