On Tue, Sep 23, 2008 at 11:26 AM, Troy Meyer <[EMAIL PROTECTED]> wrote:
> CID means you have an inline image.
> ARIAL2 means you have a 2 point arial font tag
> SARE is the Spam Assassin Rules Emporium, a set of commonly used rules for 
> catching different types of spam in SA.

Ahh...  its all coming back.  Yep yep yep.  SARE is a great regular
expression resource!

> I am curious about the quoted printable line, how is that resolved, is that 
> fixed in the MTA or is that a client setting (ME2?)

AFAIK, this is done by the MTA. The content-type header usually has a
Type of boundary= and|or charset=.  Those are the only ones I care
about anyways. type= is valid as well.  Without seeing the full
header, its hard to deduce what SA didn't like.

FWIW, RFC's show it used as type:=, but that doesnt look right to me.

I would remove that from SA, as nothing in the headers is set in
stone.  You can match against misuse, but to match against an
unrecognized content-type seems really sketchy to me.  At least lower
the value for it.














-- 
ME2

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to