> > > > > > But incoming messages encoded in Base64 containg links with > > the above > > > domains are not recognized ?? Why ?? > > one word: rawbody > > > > LER > > > > OUCH! That makes a lot of sense. Hmmm.........Should I change bigevil to > URI??? >
A related question: when you scan the messages for occurrences of evil URI's, do you decode the base64 parts first? If not, then you may be unlikely to find the URI's that are commonly cloaked by base64. ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
