-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Saturday, October 26, 2002, Scott McNay wrote...
>>> MainSet: 40Content-Type: multipart/alternative JA>> Ewww... I get a whole load of emails each day from clients, and JA>> friends that all use multipart/alternative headers for including HTML JA>> parts. I just did a quick scan of my mail base and found 974 emails JA>> containing multipart/alternative headers. Including one from a spam JA>> defence thing for Serg over at Ritlabs. I'll have a rough stab in the JA>> dark saying 75% of those mails are from Outlook/Outlook Express users. > How many have attachments? The filter only works if there's an > attachment. HTML message parts *are* attachments in all the cases I have. That is how HTML emails are constructed in most cases. > If there's an X-Mailer header or anything else non-essential, it > doesn't contain either virus, from what I can see from my samples, > so you can filter on the absence of "Outlook". 24 of the emails I checked didn't have an X-Mailer header, but where once again valid emails, I didn't go through all of them... too many ;). I personally wouldn't use the filter, but I'm not saying others shouldn't. Of course, you can never guarantee what sysadmin somewhere in between you and the sender decides to strip mail headers off. - -- Jonathan Angliss ([EMAIL PROTECTED]) -----BEGIN PGP SIGNATURE----- Comment: Fingerprint: 676A 1701 665B E343 E393 B8D2 2B83 E814 F8FD 1F73 iQA/AwUBPbwdsSuD6BT4/R9zEQLTWQCdFcccpw82vtPT9bhVC+v2OodaidMAn196 j3QbvqyS+D3pl/M0F0OOhU0P =j0Km -----END PGP SIGNATURE----- ________________________________________________ Current version is 1.61 | "Using TBUDL" information: http://www.silverstones.com/thebat/TBUDLInfo.html
