<<Declude will use as many actions as it can.  If all tests are set to WARN,
then Declude JunkMail will add an X-RBL-Warning: header for each test that
fails.>>

Thanks for clearing that last one up for me Scott, that's what I thought it
did, just making sure... anyway, here's my next query.

Is there a way to scan for e-mails with no text in the body? Is that
possible? I haven't started Declude virus because my boss only wants to take
this one step at a time. But before that, 99% or so of infected e-mails have
no text in the message.

Here is a partial header from the last one we got...

I did notice the Date warning.......

thanks for any answers.

Paul


Received: from SMTP32-FWD by mail.2khiway.net
  (SMTP32) id A000008E0; Fri, 18 Oct 2002 09:14:57 -0400
Received: from smtp01.infoave.net [165.166.0.26] by mail.2khiway.net with
ESMTP
  (SMTPD32-7.12) id A94C64300F4; Fri, 18 Oct 2002 09:14:52 -0400
Received: from Wearmxw ([207.144.35.93])
 by SMTP00.InfoAve.Net (PMDF V6.1-1X1 #38780)
 with SMTP id <[EMAIL PROTECTED]> for
[EMAIL PROTECTED];
 Fri, 18 Oct 2002 09:07:13 -0400 (EDT)
Date: Fri, 18 Oct 2002 09:03:46 -0400 (EDT)
Date-warning: Date header was inserted by SMTP00.InfoAve.Net
From: frink <[EMAIL PROTECTED]>
Subject: Happy Allhallowmas
To: [EMAIL PROTECTED]
Message-id: <[EMAIL PROTECTED]>
MIME-version: 1.0
Content-type: multipart/alternative;
 boundary=Rif2FQ4B4Gzbkj5GY124Kf740T3p6eO00Bg
Status: U
X-UIDL: 322688839

--Rif2FQ4B4Gzbkj5GY124Kf740T3p6eO00Bg
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD></HEAD><BODY>
<iframe src=3Dcid:CUd30716p height=3D0 width=3D0>
</iframe>
<FONT></FONT></BODY></HTML>

--Rif2FQ4B4Gzbkj5GY124Kf740T3p6eO00Bg
--Rif2FQ4B4Gzbkj5GY124Kf740T3p6eO00Bg
Content-Type: application/octet-stream;
 name=David Gray - Please Forgive Me.mp3
Content-Transfer-Encoding: base64
Content-ID: <CUd30716p>


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to