Re: [sa] Re: Finding URLs in html attachments

2010-03-01 Thread Charles Gregory
On Sun, 28 Feb 2010, LuKreme wrote: Your best bet is to check if mail claiming to be from paypal is, in fact, from paypal. Actually, I think his problem is that the reference to paypal has been buried in an attachment, described as 'type' of 'octet/binary' so that SA won't think it is text

Re: [sa] Re: Finding URLs in html attachments

2010-03-01 Thread David B Funk
On Mon, 1 Mar 2010, Charles Gregory wrote: On Sun, 28 Feb 2010, LuKreme wrote: Your best bet is to check if mail claiming to be from paypal is, in fact, from paypal. Actually, I think his problem is that the reference to paypal has been buried in an attachment, described as 'type' of

Re: [sa] Re: Finding URLs in html attachments

2010-03-01 Thread Charles Gregory
On Mon, 1 Mar 2010, David B Funk wrote: Looks like he may have to use a 'full' test to look for the references to paypal Been there, done that, doesn't work. AFAIK SA ignores 'octet/binary' attachments for the rule engine. None of the rules that I tried (uri, body, full, rawbody) saw

Re: [sa] Re: Finding URLs in html attachments

2010-03-01 Thread John Hardin
On Mon, 1 Mar 2010, Charles Gregory wrote: On Mon, 1 Mar 2010, David B Funk wrote: Looks like he may have to use a 'full' test to look for the references to paypal Been there, done that, doesn't work. AFAIK SA ignores 'octet/binary' attachments for the rule engine. None of the