Looks like YAHOO_REDIR looks for "http://rd.yahoo.com";, adding the "s" into the hostname threw it off ;\

Ryan Moore
----------
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)

Colin A. Bartlett wrote:
Can anyone hazard a guess as to why a message with an image and several
links in this fashion did not match the test YAHOO_REDIR...

<img border="0"
src="http://srd.yahoo.com/drst/accomplished/*http://www.grestccd.com/k.jpg";>

An image-only spam like this slipped through my SA with only these tests
matched:
  BAYES_44
  HTML_FONT_INVISIBLE
  HTML_IMAGE_ONLY_02
  HTML_MESSAGE
  MIME_HTML_ONLY
  MSGID_FROM_MTA_HEADER
  RCVD_IN_RFCI

cheers,
Colin

Colin A. Bartlett
Kinetic Web Solutions
www.kineticweb.biz






------------------------------------------------------- This SF.net email is sponsored by: The SF.net Donation Program. Do you like what SourceForge.net is doing for the Open Source Community? Make a contribution, and help us add new features and functionality. Click here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to