this thing got me again today... One squeaked through... My rule didn't fire, but has in the past...not sure what I'm donig wrong...but here is the rule:
rawbody MY_IMAGE_FILE /filename="[^"]*\.(gif|jpg)"/ describe MY_IMAGE_FILE Includes an image file either embedded or otherwise score MY_IMAGE_FILE 1.5 as I want to be able to add extensions into this rule. it SHOULD only file when the image is sent with the email..and it should fire for all email that has these embedded images...I want to start with jpg and gif what am I missing in my expession...anyone? Bueller? CT ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk