I have in one of my filter files the following line:

BODY 5 STARTSWITH <

Yet, it is not catching the following:

Received: from kirjastot.fi [213.37.211.14] by mail.localdomain.moc
  (SMTPD32-8.04) id A6AA5D600B4; Sun, 23 Nov 2003 14:12:42 -0500
Message-ID: <[EMAIL PROTECTED]>
From: "Darlene A. Campos" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: 
Date: Mon, 24 Nov 2003 10:29:48 +0000
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Content-Type: text/html
Content-Transfer-Encoding: 8bit
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 213.37.211.14
with no reverse DNS entry.
X-RBL-Warning: BASICFILTER: Message failed BASICFILTER test (1)
X-RBL-Warning: SPAMCHECK: Message failed SPAMCHECK: 14.
X-Declude-Sender: [EMAIL PROTECTED] [213.37.211.14]
X-Declude-Spoolname: D06aa05d600b43c07.SMD
X-RBL-Warning: Total weight: 34
X-Tests-Failed: IPNOTINMX, REVDNS, NOLEGITCONTENT, BASICFILTER, SPAMCHECK,
WEIGHTRANGE30-34
X-Note: This E-mail was sent from [No Reverse DNS] ([213.37.211.14]).

<gptnkipczdas><font color="white">cganfdbgnicqis<guhqziynlxqc>
sclzinxihegaca <gvzejqcdrqthrlb>umxgkectivibpb <gkqlgwndrsujke>ixluehcwwwzkj
qlbbfvcjfeyolb
xrahsgbxesl<grethyvbzyty></font><gxcqvtjbdnovg><br><gnthmxmdbhtejdc>
<font color="white">rrywumqurzerbq <gwotsslslxf>tusorpeisik
<gqkdiqictmfdfub>josibzcmwi<ggjfrcncdibxgud> xvhsnxdrtdednc<gewkbiqtgwqctc>
jxektecxqn
<gcvdbrofavhodl>qlpmzibyzklna</font><gsqljltbohycak><br><gcwxswuouqtrpd>
<b><gwrtuwvdkzi>LO<gwqrpfjbroyi>SE<guvlfocchwbvlb>
<gaxqphicikvaa>WE<geiujqibyypgycq>IG<gyzibjubmgvdpzd>HT
<gwxicixdjoxmlqi>TH<gffvsooczjo>E
<gqgkwindoynfjbb>E<grtlkbbdbwtv>ASI<gyhhwzpolgei>ER
W<gvgaixrdfkdp>AY<gldppsebsqythfc></b><gwddpzybspnyj><br>
<gksdwmlccxsyz><i>"I<gyverjtbwzj>T'S<gnqsgvswoyeuibt>
N<gpnbsvxdmyx>OT<gdlzzutcrzzw> A<gqlrtgychyms>
<gdwkphqwxmnmbj>DI<gkttlixddjgl>ET<gymzrjzcklne>
.<gmoqtcrbkgdjxt>..<gfscknibkksogf>.
<gqzriiidczwtb>IT<ggtubfzcsrb>'S<gcxhfjsbhobqx> A<ghncgopcgled> 
PA<gxuhsodcrpcpco>TC<gqgsvnykhlxxecl>H"<br></i>
<br>

TRUNCATED

John Tolmachoff
Engineer/Consultant/Owner
eServices For You



John Tolmachoff
Engineer/Consultant/Owner
eServices For You



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to