On Wed, Dec 13, 2006 at 05:52:34PM +0100, vertito wrote:
> body MY_harsh_content_RULE18        /cid:/is

Ewww!

> The ae above rules doesnt catch the said HTML spam email from yahoo.

of course.  body rules look at the rendered text, so all the html markup is
gone.

> And the only signature I can find is it has "cid:" inside the body of that 
> HTML spam email.

first, you'd want a uri rule.  second, there's already some rules that look
for this type of stuff.  third, it's not really a good spam sign in and of
itself.  fourth, use sa-update if you're not already. :)

-- 
Randomly Selected Tagline:
"Old Russian women are a hardy, fearless breeed. I'd rather take on a
 regiment of Viet Cong than a squad of these determined septegenerians. If
 you are not wearing a hat, they will come up to you and inform you that
 you are a fool."
         - http://home.earthlink.net/~afabbro/russia/russianmemoirs.html

Attachment: pgpvZeef7FojM.pgp
Description: PGP signature

Reply via email to