Dave Funk wrote: > Bob Proulx wrote: >> I was about to write the list and ask if there is a rule that could be >> triggered when a message [contains] only an image part but no text parts.
> There should already be rules for that exact format. Which rules? I see no rule hits here. I see that I can use ImageInfo and can create a ONE_IMAGE rule. But I don't see a similar "TextInfo" module and so can't create a similar ONE_TEXT rule. Is there an existing way to do this? > We see FPs on them when users e-mail in a windows screen capture to > show us a particular error they're getting. They'll put the > complaint in the subject line, paste the image into their Outlook & > hit 'send'. Yes. It is well documented that people will do the darnedest things! I don't doubt that they would have FPs as a general case. But that is why I included the weasel words "here" in my note. But even if not 100% assured everywhere then scoring it appropriately for general distribution should still allow it to increase the effectiveness of the rules for the masses. And then I could score it up. >> As far as I can tell that would work great here and for me no false >> positives. Specifically "here" that would be okay. It might not be good for other people but it would be good here and would really help with the current image only spam. Bob
