> I simply block anything not whitelisted of NP'd that starts with a
> graphic instead of text.

That's just it, looking at it in a text viewer, it starts with plain text, 
has an html section, and then has a single GIF.

I've added an example at the bottom.

Thanks,

Doug

***********************************************************
Received: from 88.12.220.196 ([88.12.220.196] 
helo=196.Red-88-12-220.dynamicIP.rima-tde.net)
 by ASSP_Spam_Filter; 6 Dec 2006 15:46:18 -0600
Received: (qmail 16623 invoked from network); Wed, 6 Dec 2006 22:46:00 +0100
Received: from unknown (HELO telddb) (88.12.210.160)
 by 196.Red-88-12-220.dynamicIP.rima-tde.net with SMTP; Wed, 6 Dec 2006 
22:46:00 +0100
Message-ID: <[EMAIL PROTECTED]>
From: "Maximilian" <[EMAIL PROTECTED]>
To: <(a_valid_user)>@(my_domain).com >
Subject: life support
Date: Wed, 6 Dec 2006 22:40:56 +0100
MIME-Version: 1.0
Content-Type: multipart/related;
 type="multipart/alternative";
 boundary="----=_NextPart_000_0007_01C71988.4CFA30A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Assp-Delay: delayed for 24m 1s; 6 Dec 2006 15:46:26 -0600
X-Assp-Received-SPF: neutral (ASSP_Spam_Filter: local policy)
 client-ip=88.12.220.196; [EMAIL PROTECTED];
 helo=196.Red-88-12-220.dynamicIP.rima-tde.net;
X-Assp-Received-RBL: neutral (ASSP_Spam_Filter: local policy)
 rbl=dnsbl.sorbs.net; client-ip=88.12.220.196;
X-Assp-Bayes-Confidence: 0.00000
X-Assp-Spam-Prob: 1.00000
X-Assp-Envelope-From: [EMAIL PROTECTED]
X-Assp-Intended-For: <removed>
X-Assp-Spam: YES
X-Assp-Spam-Reason: Bayesian spam
X-Intended-For: <removed>
X-RCPT-TO: <removed>
Status:
X-IMail-Rule: <bayesian>H~X-Assp-Spam-Reason: Bayesian 
spam:bayesiannotblocked Data- X-ASSP-SPAM-REASON: BAYESIAN S
X-UIDL: 465364945
X-IMail-ThreadID: 3a49015c0000356f

This is a multi-part message in MIME format.

------=_NextPart_000_0007_01C71988.4CFA30A0
Content-Type: multipart/alternative;
 boundary="----=_NextPart_001_0008_01C71988.4CFE7660"


------=_NextPart_001_0008_01C71988.4CFE7660
Content-Type: text/plain;
 charset="windows-1250"
Content-Transfer-Encoding: quoted-printable


Consistent Packaging for .
Novell to support Open XM.
The Audi Center in Broomfield put on a CAG Artist show and the Botanic =
Gardens exhibits CAG Artists annually.
By now everyone is fully aware that the new Libeskind designed building =
ofthe Denver Art Museum is in full swing celebrating the opening of this =
fabulousedition to Denver's cultural landscape.

<removed most of text>

You may be surprised to know that the US Govt.
Print on Demand at our Digital Art Laboratory.
Modem with TD line always. Consistent Packaging for . Songbird: Singing =
a New Tune with a Firefox Twist?
------=_NextPart_001_0008_01C71988.4CFE7660
Content-Type: text/html;
 charset="windows-1250"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dwindows-1250">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2><IMG alt=3D"foxy" hspace=3D0=20
src=3D"cid:000601c7197f$eb3182e0$a0d20c58@telddb" align=3Dbaseline=20
border=3D0></FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Consistent Packaging for .</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Novell to support Open XM.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>The Audi Center in Broomfield put on a =
CAG Artist=20
show and the Botanic Gardens exhibits CAG Artists annually.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>By now everyone is fully aware that the =
new=20

<removed most of HTML>

<DIV><FONT face=3DArial size=3D2>You may be surprised to know that the =
US=20
Govt.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Print on Demand at our Digital Art=20
Laboratory.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Modem with TD line always. Consistent =
Packaging for=20
. Songbird: Singing a New Tune with a Firefox Twist? =
</FONT></DIV></BODY></HTML>

------=_NextPart_001_0008_01C71988.4CFE7660--

------=_NextPart_000_0007_01C71988.4CFA30A0
Content-Type: image/gif;
 name="stamina.gif"
Content-Transfer-Encoding: base64
Content-ID: <[EMAIL PROTECTED]>

R0lGODdhYwLhAeMAAAAAADOZM2YzZmbMmcwAAMz/zP8zmf+ZzP/MZv/M/wAAAAAAAAAAAAAAAAAA
AAAAACwAAAAAYwLhAQAE/hDIOaq0M+ssupcCIARjuZ1oenpD1kpBHKt0bd94ru93qA+y26BQIQKG
LQxv2fMIBs9K8sWsEq4EwLXqmkqpOdmMS97JEGNxoMzOYaS6jkj0GcnkqeSx+oFT1W2BgjwGgxo+
QhNBNkVEjl9ghktOIl9HSmUHBzlYWGyWe5E2YjCSpmdpM2umphZ6oipOIXh2d3leejtQkVRAAGOs
wYKFEgbEkj6IG7A/jkQtj2x4ZU67XXvCJ1lanmWul9hhaqvZbKRr4+WBL5DMKLKU8Moab+GfiqTq
+jvHxf37bZC4EujOxiw6GzRp2kEp1IWCNFpsWtKpmyBMZvIFQgCAI0dD/h1IIBCAhhzAGghSplw2
0F4TOtNkqQDzigfNXIBO6qxhzJi6eYGefXmEMQ7MhAoVMsEFbsmmpwAm4qh4EVTGX79Msvn

<removed most of GIF image>

4ZUNd3Q0ABKgflrFjvmJNoIBGrc2z0Y+pMwodPst8S6sCTLd8wfI1gheCzUvsUGfCEVKbNsZ/lw2
0X4zwjCuLghHqdJLC5JbGE8HQppDcZjImoJ5EzGqqFSVEdd866ps9hL6SaB2wHq/ACFNURXt0r8D
jl4ki5wnuwg+fz+M6uASVEYOimxbdmTFNdDgWZjfsk651RtEAAA7

------=_NextPart_000_0007_01C71988.4CFA30A0--





-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to