hello assassin-types, I'm seeing a lot of image-only spam of the following form:
rcpt to: <userid>@domain.com Subject: Fw: <userid>Is there a way to create a simple spamassassin rule that will hit on this? I could use () and \1 in regular expressions and a giant, multi-line matching RE (probably), but I'm worried about processing time - two regular expressions would probably be better.
thoughts?
