I have two types of spam that are slipping through, and I'm wondering if
anyone has rules to help with them.

Thanks to the imageinfo plugin, most of my image spam has disappeared except
for one particular type.  I'm still seeing .gif image spams where the
filename for the image does not contain .gif.  Like this:

Content-Type: image/gif;
     name="glitter"
Content-Transfer-Encoding: base64
Content-ID: <[EMAIL PROTECTED]>


The other type of spam I'm seeing are empty messages.  They have a single word
for a subject, but nothing in the body.  About a year ago, I was getting
flooded with these, and I solved the problem by using the SARE_HTML_NO_BODY
rule from 70_sare_html4.cf.  However, this rule does not seem to hit on this
recent crop of empty messages.  I have no idea why.

Is anyone else seeing these, and more importantly, does anyone have a rule for
them?

Craig

Reply via email to