Title: RE: Having issue with a type of spam I havn't seen before
I'm just waiting for some votes before I release the SARE ruleset for these guys. I finally believe I got it nailed down.
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www
>>
>> On Fri, 13 Oct 2006, Jo for Groups and Lists wrote:
>>
>> > Date: Fri, 13 Oct 2006 12:01:32 -0400
>> > From: Jo for Groups and Lists <[EMAIL PROTECTED]>
>> > To: users@spamassassin.apache.org
>> > Subject: RE: Having issue with
On Fri, 2006-10-13 at 15:22 -0600, Chris Stone wrote:
> On Fri, 2006-10-13 at 10:38 -0400, Dylan Bouterse wrote:
> > I’m trying to write a rule to score src=cid” but I can’t seem to get
> > it right. Can somebody shed some light on what I’d use for the
> > 20_phrases.cf file so I can start scoring
On Fri, 13 Oct 2006, Jo for Groups and Lists wrote:
> Date: Fri, 13 Oct 2006 12:01:32 -0400
> From: Jo for Groups and Lists <[EMAIL PROTECTED]>
> To: users@spamassassin.apache.org
> Subject: RE: Having issue with a type of spam I havn't seen before
>
> Are you using
On Fri, 2006-10-13 at 10:38 -0400, Dylan Bouterse wrote:
> I’m trying to write a rule to score src=cid” but I can’t seem to get
> it right. Can somebody shed some light on what I’d use for the
> 20_phrases.cf file so I can start scoring this? Thanks.
Here's what I am using with success:
rawbody S
Are you using Outlook by any chance? If you are, mostly "src=CID"
only appears in the View-Source via Outlook. It's a reference to the
downloaded image saved in the temp files on your desktop. If you
look at the raw mail file on the server before downloading the
message, there is a regular "img s
Thomas Lindell wrote:
I don't see anything attached to the message though.
Even when I view the source I don't see a mime attachment.
Well, the attachment is missing then.
Come to think of it, that would be some excellent rule :-]
--
Andreas
ving issue with a type of spam I havn't seen before
Thomas Lindell wrote:
> but whas is the CID . Is that some sort of alternate notation for an
> ip address?
It's a reference to an attached image.
--
Andreas
Thomas Lindell wrote:
but whas is the CID . Is that some sort of alternate notation for an
ip address?
It's a reference to an attached image.
--
Andreas
On Fri, Oct 13, 2006 at 09:54:07AM -0500, Thomas Lindell wrote:
> but whas is the CID . Is that some sort of alternate notation for an ip
> address?
Short for "Content-ID", it'll be a reference to a MIME part (with a Content-ID
header matching that value) in the message.
--
Randomly Selected Ta
issue with a type of spam I havn't seen before
I’m trying to write a
rule to score src="" but I can’t seem to get it right. Can somebody shed some
light on what I’d use for the 20_phrases.cf file so I can start scoring this?
Thanks.
Dylan
From: Thomas
Lindell [mailto:[E
Title: Having issue with a type of spam I havn't seen before
I’m trying to write a rule to score
src="" but I can’t seem to get it right. Can somebody shed some
light on what I’d use for the 20_phrases.cf file so I can start scoring
this? Thanks.
Dylan
From: Thomas Lindell
[
12 matches
Mail list logo
