On Fri, 2006-10-13 at 10:38 -0400, Dylan Bouterse wrote: > I’m trying to write a rule to score src=cid” but I can’t seem to get > it right. Can somebody shed some light on what I’d use for the > 20_phrases.cf file so I can start scoring this? Thanks.
Here's what I am using with success: rawbody SENET_INLINEIMG /src\s*=\s*["']cid:/i