Andy suggested: > There is a way of filtering them out - it works fine for me. > > Image spam almost always has the Content-Type header set to > 'multipart/related'. Normal email with attachments almost always > has Content-Type set to 'multipart/mixed'. It seems to be a trait > of this kind of spam that they use 'multipart/related'. Don't ask > me why - anyone care to speculate? > > Anyway, if you can create your own filtering rules, check for > 'multipart/related' and dump any in your junk/spam mailbox. I have > this as the lowest priority rule so that any genuine 'multipart/ > related' mail on various mailing lists or from people in my address > book gets dealt with properly and doesn't fall into the trap. > > I have yet to see a genuine mail from anyone that uses multipart/ > related for attachments.
Ah, thanks Andy, that might be just the sort of 'golden bullet' that I'm looking for to include in my ISP filtering. I'll check the offending messages and see if you're correct. If so, I'll give it a try. Rog
