On 03.06.10 20:45, cviebrock wrote: > Thanks for the link. That'll help. > > In general, though, can I write a SA rule that looks at the raw message body > with trying to decode attachments, etc.? I thought that would be the > easiest way to catch these messages (and some other spam that comes in as > PNG files).
for images, there is FuzzyOcr plugin that can catch image spam. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Atheism is a non-prophet organization.
