Is there a way to make two tests linked together?
In this case the
SUBJECT 0 CONTAINS Osama bin Laden Captured
And a
BODY 0 CONTAINS "link to pictures (whatever the
link is)"
So for the test to trip both conditions would have to be true? In this
case filtering on the SUBJECT will catch this mail but of course
anything with the same text.
Goran Jovanovic
The LAN Shoppe
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
> Sent: Tuesday, April 27, 2004 11:02 AM
> To: [EMAIL PROTECTED]
> Subject: [Declude.JunkMail] New Trojan
>
> There's a new trojan floating around with the subject of "Osama bin
> Laden Captured" and a link to photos which is actually a trojan. So
far
> easy enough to filter with JunkMail, but this has hit a number of law
> enforcement agencies and is apparently very tempting, a number of
> users have opened it.
>
> Sigh... You can warn them... :)
>
> Jeff Cochran
> City of Naples, Florida
> ---
> [This E-mail scanned for viruses by Declude Virus]
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
[AUTOMATED NOTE: Your mail server [205.150.108.13] is missing a reverse DNS entry. All
Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry
will cause your mail to be treated as spam on some servers, such as AOL.]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
