M>-----Original Message----- M>From: Dan Simmons [mailto:[EMAIL PROTECTED] M>Sent: 14 May 2005 18:13 M>To: users@spamassassin.apache.org M>Subject: Drug SPAM problem..any fixes? M> M>Hi All, M> M>I am having an issue with the following DRUG related spam. Does M>anyone have any rules to catch this? M>------=_Part_26268598_14758651.1312519906417 M>Content-Type: image/gif; M> name="Frccf.GIF" M>Content-Transfer-Encoding: base64 M>Content-ID: <lrvnmnh_ywroot_rvdee> M>
You could probably write a rule to catch it using a signature from the gif, here's an example of one I have done for some viagra/cialis spam that uses a gif full __MS_Drug_Gif /\bR0lGODlh/ full __MS__Gif /\bimage\/gif\b/i meta MS_Drug_Gif __MS_Drug_Gif && __MS__Gif score MS_Drug_Gif 5 describe MS_Drug_Gif Gif Used to Advertise Meds R0lGODlh is the beginning of the gif when viewed raw Martin
