On Wed, Dec 13, 2006 at 05:52:34PM +0100, vertito wrote: > body MY_harsh_content_RULE18 /cid:/is
Ewww! > The ae above rules doesnt catch the said HTML spam email from yahoo. of course. body rules look at the rendered text, so all the html markup is gone. > And the only signature I can find is it has "cid:" inside the body of that > HTML spam email. first, you'd want a uri rule. second, there's already some rules that look for this type of stuff. third, it's not really a good spam sign in and of itself. fourth, use sa-update if you're not already. :) -- Randomly Selected Tagline: "Old Russian women are a hardy, fearless breeed. I'd rather take on a regiment of Viet Cong than a squad of these determined septegenerians. If you are not wearing a hat, they will come up to you and inform you that you are a fool." - http://home.earthlink.net/~afabbro/russia/russianmemoirs.html
pgpvZeef7FojM.pgp
Description: PGP signature