Re: [SAtalk] Stop mails with "cid:pic.gif"

[Fred]

Try upgrading to 2.60, it's much better at parsing these messages.  That
spam is using a trick which makes the message body invisible to SA, it's
fixed in 2.60.



Frederic Tarasevicius
Internet Information Services, Inc.



Muenz, Michael wrote:
> Hi,
>
> I often receive Spam with a link includes "cid:pic.gif";.
> I tested a simple rule:
>
> body CIDPIC
> /cid:pic1.gif|cid:pic.gif|cid:picture.gif/
> describe CIDPIC                         Catch them all
> score CIDPIC 2.5
>
> When I copy the sourcecode from the html mail and
> test it, it works. But when the mail is sent as html
> with the loaded image the rule doesn't detect it.
>
> Any ideas ?
> Thx
>
> - Michael
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk