> 
> This seems rather odd.  I suppose you did lint your rules to 
> make sure that you don't have a problem somewhere?  It is 
> known that SA can do things like dropping most of the rules 
> file following a rule with an error in it.
> 

Yup; no lint problems at all.

> Maybe you are using Amvis-new or one of the other tools that 
> does its own header rewriting in at least some cases?
> 

MIMEDefang, but I can't see it doing this.

> I do have a suggestion for improving your rule though.  There 
> are several things that aren't as efficient as they should 
> be.  Instead of
> 
> > rawbody IMG_SRC_CID         /src\=(\"c|c)id\:/i
> 
> do
> 
> > rawbody IMG_SRC_CID         /src="?cid:/i
> 

Thanks much - I need all the perl help I can get. :)

-- tim --

Reply via email to