On 2/10/2014 12:14 PM, Axb wrote:
On 02/10/2014 05:16 PM, Joe Quinn wrote:
I've attached a munged example of a strange pattern we've just started
getting.
It consists of BODY_8BITS, plus an empty text/plain, nearly empty
text/html, and some other office attachment.
Is there a good way to match for the empty plain and html parts? The
__KAM_BODY_LENGTH_LT_XXX rules are not hitting because of the office
file. I don't want to just hammer on the FARAWAY rules because of the FP
potential.
Pls don't send spam samples to the list
Use pastebin.
Sorry, pasted here: http://pastebin.com/mPuT5R4a
