> This brings up a question. Why are these sent out? To validate addresses > perhaps?
Virtually all of the ones I see typically also lack either or both of a subject and a To: address. They very typically have some header information mangled also. My belief is that one of the spammer tools (I have no idea which one, never having looked at that stuff) is perhaps not the easiest for boneheads to use completely without thought, and if you misconfigure it, you end up with a run of blank spam. I suppose this could be a simple 'ping' test to make sure your spam sending network is working after reconfiguration, and before seinding something for a paying customer. I think its more likely that it is just a stupid misconfiguration though. > > Anybody got a rule that will catch messages that don't have a body? There are things like that around. I have a rather draconian pesonal rule I use. There is a much milder form in one of the SARE rulesets. The problem is you can't check just missing body, as you will get way too many FPs in a business environment. Loren