Unfortunately this is what I may be forced to do. I hate to let one item give a high score, but when the message is nothing but an IMAGE... no HTML... no link... and the blacklists have not yet picked it up.. and Pyzor doesn't see it yet... what else can you do?
On 4/22/06, John D. Hardin <[EMAIL PROTECTED]> wrote: > On Fri, 21 Apr 2006, Matt wrote: > > > We have received a large quantity of spam that is nothing but a large > > image. Spamassassin is tagging it a little because it is an image, > > and only an image, however I'm wondering how other people are > > handeling this type of spam? I don't want to score mail that is > > just an image with a very high score, since that could render a legit > > mail with a picture in it or something as spam. Any thoughts? > > Many of them are HTML-only (no plain-text parts). I give HTML-only + > image-only a high score. > > -- > John Hardin KA7OHZ ICQ#15735746 http://www.impsec.org/~jhardin/ > [EMAIL PROTECTED] FALaholic #11174 pgpk -a [EMAIL PROTECTED] > key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 > ----------------------------------------------------------------------- > Senator, when you took your oath of office, you placed your hand on > the Bible and swore to uphold the Constitution. You didn't place your > hand on the Constitution and swear to uphold the Bible. > -- Jamie Raskin, Professor of Law at American > University, testifying before the Maryland Senate > ----------------------------------------------------------------------- > >