On Mon, 2006-07-31 at 18:34 -0500, Tim wrote: > > But I find it amusing that people here are more interested in > telling > spammers how they can defeat an algorithm instead of the other > way around. 99% of the techniques in SpamAssassins hvae an easy > workaround - does that stop anybody from using them?
At my (small) site we receive very few legitimate emails that have attached images that are referenced in the HTML of the message. It's basically only a few droolers who decided to use an image as their sig. Thus testing for /src\s*=\s*["']cid:/i in the rawbody of the message is working very nicely against image spams. False positives on those people with image sigs are prevented by AWL, Bayes and not scoring the test too highly. Is that positive enough? Derek
