-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

jdow wrote:
> From: "Chris Santerre" <[EMAIL PROTECTED]>
>>> From: Yves Goergen [mailto:[EMAIL PROTECTED]
>>>
>>> Hello,
>>> I keep receiving messages that contain of nothing but composed images.
>>> They're HTML messages with only <img/> tags in them. There seems to be a
>>> rule that checks if the message has *any* image and compares it to its
>>> length. That gave my spam some scores recently but not so today. I
>>> received a message that looks just like the others but has no score at
>>> all due to the fact that it only contains of images.
>>>
>>> Is there any way to detect this type of message with SpamAssassin? I
>>> cannot think of a regular expression that would do it, and even if I
>>> could, SA offered no way to match it reliably. (See the line-by-line
>>> problem with 'rawbody' and encoding problems with 'full'.)
>>
>> I keep hearing this is a problem, but I'm not seeing it on my end.
>> Most are
>> being caught:
> ....
>>
>> I'll have to adjust for those 2. :) 
> 
> In case he means no score and no SA markup there is still a way this
> can happen. If an email comes in during a very tiny window when spamd
> is reloading its configuration (-HUP) the email can sneak through.
> 
> {^_^}

Of course this can also happen if the message size is greater than the
upper size limit set (default 250k) ... being that it's an image only,
I'd say it's definitely a possibility.  (I've seen that happen on my
system in the past)

Alan
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEl45SE2gsBSKjZHQRAmKdAKCmcutB8fkoZZQCVMDsZSfBHXpwxACffS9X
5T96aD/02CijQdHB+uoy54c=
=XRir
-----END PGP SIGNATURE-----

Reply via email to