On Monday, September 20, 2004, 5:46:00 AM, Roger wrote: RM> Since the content-type "multipart" must specify a "boundary", I suggest you RM> filter all mail that have the content type "multipart" without "boundary=".
RM> Currently PARMACIA.BIZ sends hundreds of spams daily to our domain and RM> probably to others also. All of them say: RM> Content-Type: multipart/mixed; RM> Content-Transfer-Encoding: 7bit I'll take a look at this next time I get to see a sample. Sniffer's not good at looking for what is not there but I might find a way in this case. Also, why not just nail the domain? Thanks for the heads up. _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
