RE: [SAtalk] Scanning for an attachment file name

Matthew Thomas Wed, 20 Aug 2003 11:22:25 -0700

/pic.gif/i does not match "pic.gif"

Try /pic\.gif/i


-Matt Thomas

> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On 
> Behalf Of Amnon
> Sent: Wednesday, August 20, 2003 9:17 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Scanning for an attachment file name
> 
> 
> What am I doing wrong?  I added a rule:
> 
> body PIC_GIF                /pic.gif/i
> describe PIC_GIF            PIC_GIF
> score PIC_GIF               9.0
> 
> The message source is below. The string pic.gif apears four 
> different time in it.  Why doesn't SA sees it?
> 
> -----------------------------------
> 
> Received: (qmail 31646 invoked from network); 19 Aug 2003 
> 13:48:24 -0000
> Received: from ool-18b9cc85.dyn.optonline.net (24.185.204.133)
>   by jed.deltaforce.net with SMTP; 19 Aug 2003 13:48:23 -0000
> From: [EMAIL PROTECTED]
> To: Amnon <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> Sender: [EMAIL PROTECTED]
> Subject: Fw: Iook at these ASlAN CR/\ZZZY T^^Nl^S, Amnon... zWVdW tR
> MIME-Version: 1.0
> Content-Type: multipart/mixed; 
> boundary="----=_NextPart_000_0012_01C27DD2.75377C90"
> X-Spam-Status: No, hits=1.6 required=3.5  
> tests=DATE_MISSING,NO_REAL_NAME  version=2.55
> X-Spam-Level: *
> X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
> X-Spam-Report:   ---- Start SpamAssassin results
>   1.60 points, 3.5 required;
>   *  1.1 -- Missing Date: header
>   *  0.5 -- From: does not include a real name
>   ---- End of SpamAssassin results
> X-Pyzor: Reported 0 times.
> 
> This is a multi-part message in MIME format.
> 
> ------=_NextPart_000_0012_01C27DD2.75377C90
> Content-Type: multipart/related; 
> type="multipart/alternative"; 
> boundary="----=_NextPart_002_0012_01C27DD2.75377C90"
> 
> 
> ------=_NextPart_002_0012_01C27DD2.75377C90
> Content-Type: multipart/alternative; 
> boundary="----=_NextPart_001_0012_01C27DD2.75377C90"
> 
> ------=_NextPart_001_0012_01C27DD2.75377C90
> Content-Type: text/plain
> Content-Transfer-Encoding: 8bit
> 
> J k z e W a Z X Z J A T
> 1977
> 
> ------=_NextPart_001_0012_01C27DD2.75377C90
> Content-Type: text/html
> Content-Transfer-Encoding: 8bit
> 
> <html>
> <head>
> <meta http-equiv="Content-Type" content="text/html; 
> charset=iso-8859-1"> </head> <body bgcolor="#FFFF06" 
> text="#000060"> <p><a 
> href="http://%32%31%31%2E%32%33%39%2E%31%32%31%2E%32%31/%6D%61
> %69%6E6.htm"><img
> src="cid:pic.gif"; width="261" height="187" 
> border="0"></a></p> <p><font color="#FDEF89"></font></p> 
> <p><font color="#E9ED30">Amnon wxvJyBAok BzB44</font></p> 
> </body> </html>
> 
> ------=_NextPart_001_0012_01C27DD2.75377C90--
> 
> ------=_NextPart_002_0012_01C27DD2.75377C90
> Content-Type: image/gif; name="pic.gif"
> Content-Transfer-Encoding: base64
> Content-Disposition: attachment; filename="pic.gif"
> Content-ID: <pic.gif>
> 
> R0lGODlhBQG7APECAP8AAP///wAAAAAAACH5BAQAAAAALAAAAAAFAbsAAAL/jH
> 8AyO1vlJwK
> 2ouz3rz7D4YZRUUlJj3nWiUtl6rkEkwyzcSuWL820vrtdCagTlg0kXgunCP4eh
> ItyOMUde35
> Yllk0xmFzE7a8cKcqjq1SnP5y2SLcdn2aGpd38PKHJ3/1uAFeEEod3OzFkVUh6
> cHUpfUJ2Vo
> 9Aj1iAVYeWiZqfZBGNnptwhm+pkZ11OImajaNEe6twk7S1Z6GpoKGwkaCyxoy8
> NZZljBOYq7
> gXxpe9WcaLSLOKf6O5nttyqj+UxTWeylAUW5zFcunOchamo53fanG8waP9ohnv
> wnqW3Nvl8v
> 
> Etc. Etc.
> 
> ----------------------------------
> 
> Thanks
> 
> Shalom Ya'll
> Amnon Nissan
> 
> Deltaforce
> 919-852-2121
> http://www.deltaforce.net
> 
> Host, Computers 2K3
> on 850 The Buzz  (AM 850) in Raleigh NC
> Sundays 8-10am
> http://www.850thebuzz.com/compute.html
> 
> MV stuff are at:
>   http://www.deltaforce.net/deuce/
>   http://www.ncmvpa.com
> 
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by Dice.com.
> Did you know that Dice has over 25,000 tech jobs available 
> today? From careers in IT to Engineering to Tech Sales, Dice 
> has tech jobs from the best hiring companies. 
> http://www.dice.com/index.epl?rel_code=104
> 
> _______________________________________________
> Spamassassin-talk mailing list [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
> 



-------------------------------------------------------
This SF.net email is sponsored by Dice.com.
Did you know that Dice has over 25,000 tech jobs available today? From
careers in IT to Engineering to Tech Sales, Dice has tech jobs from the
best hiring companies. http://www.dice.com/index.epl?rel_code=104
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

RE: [SAtalk] Scanning for an attachment file name

Reply via email to