Ben Hanson wrote:
Hmm, scoring certain attachments (.gif, .jpg, etc) based on a calculated checksum (md5 or otherwise).
Now that I think about it, I recall Razor used to run into false positives with one of the background images in a set of Outlook stationery (because some spammers had used the same template). The key point being that Razor generates signatures from all MIME parts, images included.
Depending on the default config, it may already take care of these. -- Kelson Vibber SpeedGate Communications <www.speed.net>
