Per Jessen wrote:
> I've got a couple of FPs that all got 1.6points from OBSCURED_EMAIL -
>
> body OBSCURED_EMAIL /\w+\^\S+\(\w{2,4}\b/
> describe OBSCURED_EMAIL Message seems to contain rot13ed address
>
I was having a closer look, and I couldn't even find a '^' character
anywhere - till I realised that the email contained 4 JPEGs as
attachment, but with
Content-Type: ; name=PICT0089.JPG
I.e. no MIME-type provided. I'm guessing that spamassassin decided to
scan those attachments as if they were body text, and then found
something or other weird in the JPEG.
Has anyone else come across this?
/Per Jessen, Zürich
