I'm seeing a huge spam run from well distributed bots. Multi part MIME
messages
with an empty (three blank lines) text/plain part, *no* text/html part, and
an
attachment in GIF or PDF format.
I want to give those a really high score. False positives when there is no
text in
the message are acceptable. Hoping someone has a rule to do it.
I looked through all the rules in share/spamassassin/*.cf. There are some
tests
like MPART_ALT_DIFF (eval:multipart_alternative_difference('99', '100'))
which seem to be looking for a text/html part, so they don't apply.
I looked up that rule and the explanation is "<explanation of the rule goes
here>"
not exactly helpful, and it's not obvious what the arguments to
multipart_alternative_difference
mean or do.
I've searched on every combination of "spamassassin rule text no html" I
could think of.
No useful hits.
--
View this message in context:
http://www.nabble.com/rule-for-empty-text-%2B-GIF-or-PDF---tf4238805.html#a12061080
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
