OK, understood.
Would it then be a good idea to filter on the headers for "Content-Transfer-Encoding: base64"?
No (or else that's what the BASE64 test would do <G>).
The problem is that filtering for "Content-Transfer-Encoding: base64" will catch any E-mail with an attachment that uses base64 encoding (for example, if a .jpg or .zip file is attached).
-Scott
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
