> > This seems rather odd. I suppose you did lint your rules to > make sure that you don't have a problem somewhere? It is > known that SA can do things like dropping most of the rules > file following a rule with an error in it. >
Yup; no lint problems at all. > Maybe you are using Amvis-new or one of the other tools that > does its own header rewriting in at least some cases? > MIMEDefang, but I can't see it doing this. > I do have a suggestion for improving your rule though. There > are several things that aren't as efficient as they should > be. Instead of > > > rawbody IMG_SRC_CID /src\=(\"c|c)id\:/i > > do > > > rawbody IMG_SRC_CID /src="?cid:/i > Thanks much - I need all the perl help I can get. :) -- tim --