Just saw this come thru:
Content-type: multipart/alternative;
boundary="--XXXX-3832313337353739393830303030303031393433-XXXX--"
So we need to change this rule from:
header L_MIME_BOUND_SIMPLE Content-Type =~
/boundary="XXXX-Simple-Boundry-XXXX"/
describe L_MIME_BOUND_SIMPLE Spam tool pattern in MIME boundary
score L_MIME_BOUND_SIMPLE 1.44
to
header L_MIME_BOUND_SIMPLE Content-Type =~
/boundary=".{0,10}XXXX-\w{1,50}-XXXX"/
that should do it. Did they think I wouldn't notice? :-)
Even without this it scored a 16+ and went to the trap.
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
"A little nonsense now and then, is relished by the wisest men." - Willy
Wonka
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
