On Thu, Oct 26, 2006 at 09:46:28AM -0400, Peter H. Lemieux wrote: > Does SA convert the blob into text before scanning? It contains a number > of drug-related words and a URI that points to "pharmconnect.org".
Yes. > Also is there an SA rule that scores messages that contain only a single > base64 part (as opposed to a base64-encoded attachment)? I doubt many > legitimate messages arrive with only a single base64 part. No, because there are going to be a lot of mails that would hit that. -- Randomly Selected Tagline: Interstellar Matter is a Gas
pgp2epphYM5Xr.pgp
Description: PGP signature
