What am I doing wrong? I added a rule: body PIC_GIF /pic.gif/i describe PIC_GIF PIC_GIF score PIC_GIF 9.0
The message source is below. The string pic.gif apears four different time in it. Why doesn't SA sees it? ----------------------------------- Received: (qmail 31646 invoked from network); 19 Aug 2003 13:48:24 -0000 Received: from ool-18b9cc85.dyn.optonline.net (24.185.204.133) by jed.deltaforce.net with SMTP; 19 Aug 2003 13:48:23 -0000 From: [EMAIL PROTECTED] To: Amnon <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Sender: [EMAIL PROTECTED] Subject: Fw: Iook at these ASlAN CR/\ZZZY TˆˆNlˆS, Amnon... zWVdW tR MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0012_01C27DD2.75377C90" X-Spam-Status: No, hits=1.6 required=3.5 tests=DATE_MISSING,NO_REAL_NAME version=2.55 X-Spam-Level: * X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) X-Spam-Report: ---- Start SpamAssassin results 1.60 points, 3.5 required; * 1.1 -- Missing Date: header * 0.5 -- From: does not include a real name ---- End of SpamAssassin results X-Pyzor: Reported 0 times. This is a multi-part message in MIME format. ------=_NextPart_000_0012_01C27DD2.75377C90 Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_002_0012_01C27DD2.75377C90" ------=_NextPart_002_0012_01C27DD2.75377C90 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0012_01C27DD2.75377C90" ------=_NextPart_001_0012_01C27DD2.75377C90 Content-Type: text/plain Content-Transfer-Encoding: 8bit J k z e W a Z X Z J A T 1977 ------=_NextPart_001_0012_01C27DD2.75377C90 Content-Type: text/html Content-Transfer-Encoding: 8bit <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> </head> <body bgcolor="#FFFF06" text="#000060"> <p><a href="http://%32%31%31%2E%32%33%39%2E%31%32%31%2E%32%31/%6D%61%69%6E6.htm";><img src="cid:pic.gif"; width="261" height="187" border="0"></a></p> <p><font color="#FDEF89"></font></p> <p><font color="#E9ED30">Amnon wxvJyBAok BzB44</font></p> </body> </html> ------=_NextPart_001_0012_01C27DD2.75377C90-- ------=_NextPart_002_0012_01C27DD2.75377C90 Content-Type: image/gif; name="pic.gif" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="pic.gif" Content-ID: <pic.gif> R0lGODlhBQG7APECAP8AAP///wAAAAAAACH5BAQAAAAALAAAAAAFAbsAAAL/jH8AyO1vlJwK 2ouz3rz7D4YZRUUlJj3nWiUtl6rkEkwyzcSuWL820vrtdCagTlg0kXgunCP4ehItyOMUde35 Yllk0xmFzE7a8cKcqjq1SnP5y2SLcdn2aGpd38PKHJ3/1uAFeEEod3OzFkVUh6cHUpfUJ2Vo 9Aj1iAVYeWiZqfZBGNnptwhm+pkZ11OImajaNEe6twk7S1Z6GpoKGwkaCyxoy8NZZljBOYq7 gXxpe9WcaLSLOKf6O5nttyqj+UxTWeylAUW5zFcunOchamo53fanG8waP9ohnvwnqW3Nvl8v Etc. Etc. ---------------------------------- Thanks Shalom Ya'll Amnon Nissan Deltaforce 919-852-2121 http://www.deltaforce.net Host, Computers 2K3 on 850 The Buzz (AM 850) in Raleigh NC Sundays 8-10am http://www.850thebuzz.com/compute.html MV stuff are at: http://www.deltaforce.net/deuce/ http://www.ncmvpa.com ------------------------------------------------------- This SF.net email is sponsored by Dice.com. Did you know that Dice has over 25,000 tech jobs available today? From careers in IT to Engineering to Tech Sales, Dice has tech jobs from the best hiring companies. http://www.dice.com/index.epl?rel_code=104 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
![cid:pic.gif"](cid:pic.gif"){kind=link}