I'm trying to write a rule for the rules.ima file that will catch incoming mail where the body contains text similar to the following string...
<IFRAME height=0 src="cid:AbC123dEf456"; width=0></IFRAME> I've tried searching for pieces of this, like these two... B~IFRAME height=0:spambox B~width=0></IFRAME>:spambox and a half-dozen other variations but these messages just sail right past the rules. Any ideas about what I'm overlooking? Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
