Re: OK guys - why did this one get through.

[jdow]

From: "Craig McLean" <[EMAIL PROTECTED]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
jdow wrote:

[Headers snipped]

I've been using the rules below to catch the paypal phishing mails I
get. I know they don't counter the header issues you are seeing, but I'd
be interested to know if they hit on the full message. If not, I'd
appreciate a zipped copy of the original with anything sensitive removed...

http://fukka.co.uk/sa-rules/local/paypal_rules.cf

No. The body was:
<a href="http://hometown.MUNGE-aol.com/doilapit"; target="_blank">
   <img alt="PayPal" src="http://hometown.MUNGE-aol.com/doilapit/letter.jpg"; border="0" 
></a>

{^_^}