I have two types of spam that are slipping through, and I'm wondering if anyone has rules to help with them.
Thanks to the imageinfo plugin, most of my image spam has disappeared except for one particular type. I'm still seeing .gif image spams where the filename for the image does not contain .gif. Like this: Content-Type: image/gif; name="glitter" Content-Transfer-Encoding: base64 Content-ID: <[EMAIL PROTECTED]> The other type of spam I'm seeing are empty messages. They have a single word for a subject, but nothing in the body. About a year ago, I was getting flooded with these, and I solved the problem by using the SARE_HTML_NO_BODY rule from 70_sare_html4.cf. However, this rule does not seem to hit on this recent crop of empty messages. I have no idea why. Is anyone else seeing these, and more importantly, does anyone have a rule for them? Craig