> I had one slip right through. > > Looks like PDFInfo.pm loaded too.. > > > -- > > And here are the headers from the email. It was blank, > but had a PDF attached. > > Received: from [132.126.187.69] by > ip117-137-211-87.adsl2.versatel.nl with HTTP;
Try Botnet -plugin. It would have saved ya.