There is probably some html coding before that line.

----- Original Message ----- From: "Dave Beckstrom" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Monday, January 16, 2006 9:02 AM
Subject: [Declude.JunkMail] Help with filter


I received a spam email, which was an HTML email with only one line.  The
line is as follows:

<img src=cid:85ae9b8e79a2548912c0c40ef7709a27>

I have a body filter with the following:

BODY   2 BEGINSWITH <img src=cid:

The filter didn't trip on the spam email.  Any idea of why this wouldn't
work?

Thanks,

Dave

---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to