On Mon, 7 Feb 2005, Matt Kettler wrote:
> I suspect the message in question has the "see attachment" text directly
> after a Content-Transfer-Encoding: section header with no line break. I've
> seen some floating around like that, and they are intentionally creating a
> malformed message knowing m
At 02:49 PM 2/7/2005, [EMAIL PROTECTED] wrote:
I found out what the problem is, and it seems like it should be considered
a bug in SA. The text in question is in the second line of the body of
the message, and it seems it is being ignored by SA, because if I insert a
couple of LFs to move it down,
On Mon, 7 Feb 2005, Alex Broens wrote:
> [EMAIL PROTECTED] wrote:
> > On Mon, 7 Feb 2005 [EMAIL PROTECTED] wrote:
> >
> >>I just created a rule for the most common spams that have been making it
> >>through SA, but for some reason, it's not showing up in the tests:
> >>
> >>body SEE_ATTACH
[EMAIL PROTECTED] wrote:
On Mon, 7 Feb 2005 [EMAIL PROTECTED] wrote:
I just created a rule for the most common spams that have been making it
through SA, but for some reason, it's not showing up in the tests:
body SEE_ATTACH /See attachment message.html/i
describe SEE_ATTACH
On Mon, 7 Feb 2005 [EMAIL PROTECTED] wrote:
>
> I just created a rule for the most common spams that have been making it
> through SA, but for some reason, it's not showing up in the tests:
>
> body SEE_ATTACH /See attachment message.html/i
> describe SEE_ATTACH body c
[EMAIL PROTECTED] wrote on 02/07/2005 11:28:49 AM:
>
> I just created a rule for the most common spams that have been making
it
> through SA, but for some reason, it's not showing up in the tests:
>
> body SEE_ATTACH
/See attachment message.html/i
> describe SEE_ATTACH
I just created a rule for the most common spams that have been making it
through SA, but for some reason, it's not showing up in the tests:
body SEE_ATTACH /See attachment message.html/i
describe SEE_ATTACH body contains See attachment message.html
score SEE_ATTACH