In addition to the Popcorn/Backhair rules chris mentioned, also look for a
rawbody rule to catch the *invisible* text:
<font color="#FFFFFF">
My rule looks like:
describe MY_RBDY_INVSTXT MY: Invisible text color
rawbody MY_RBDY_INVSTXT /<font\s?.*
color=("?\#?FFFFF[0-9A-F]"?|"?white"?).*>/i
score MY_RBDY_INVSTXT 2.0
I know Outlook is going to wrap the rawbody line above. Each line can not
wrap.
--Larry
> -----Original Message-----
> From: Howard Brazee [mailto:[EMAIL PROTECTED]
> Sent: Thursday, October 30, 2003 8:45 AM
> To: Spamassassin-Talk (E-mail)
> Subject: [SA Hits: 10.90] [SAtalk] How do I filter something
> like this?
>
>
> I can't see any recognized words in this:
> <html>
> <body><kmcumppcfnt>
> <kaixrhbbebvw><center><kqtfkmcwjztqo>
> <table width="580" border="0"><kgmobvmbcwuv>
> <td>
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
