On Mon, 7 Feb 2005, Matt Kettler wrote: > I suspect the message in question has the "see attachment" text directly > after a Content-Transfer-Encoding: section header with no line break. I've > seen some floating around like that, and they are intentionally creating a > malformed message knowing many mime parsers will treat it as a header, not > a body text.
I suspected that as well, which is why I tried the "header" type rule. > I'd suggest trying your rule as a "full" type rule, instead of body, > rawbody, or header type. > > Full should be run on the whole message, without any mime-stripping. That did it, thanks! James Smallacombe PlantageNet, Inc. CEO and Janitor [EMAIL PROTECTED] http://3.am =========================================================================
