-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 jdow wrote: > From: "Chris Santerre" <[EMAIL PROTECTED]> >>> From: Yves Goergen [mailto:[EMAIL PROTECTED] >>> >>> Hello, >>> I keep receiving messages that contain of nothing but composed images. >>> They're HTML messages with only <img/> tags in them. There seems to be a >>> rule that checks if the message has *any* image and compares it to its >>> length. That gave my spam some scores recently but not so today. I >>> received a message that looks just like the others but has no score at >>> all due to the fact that it only contains of images. >>> >>> Is there any way to detect this type of message with SpamAssassin? I >>> cannot think of a regular expression that would do it, and even if I >>> could, SA offered no way to match it reliably. (See the line-by-line >>> problem with 'rawbody' and encoding problems with 'full'.) >> >> I keep hearing this is a problem, but I'm not seeing it on my end. >> Most are >> being caught: > .... >> >> I'll have to adjust for those 2. :) > > In case he means no score and no SA markup there is still a way this > can happen. If an email comes in during a very tiny window when spamd > is reloading its configuration (-HUP) the email can sneak through. > > {^_^}
Of course this can also happen if the message size is greater than the upper size limit set (default 250k) ... being that it's an image only, I'd say it's definitely a possibility. (I've seen that happen on my system in the past) Alan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEl45SE2gsBSKjZHQRAmKdAKCmcutB8fkoZZQCVMDsZSfBHXpwxACffS9X 5T96aD/02CijQdHB+uoy54c= =XRir -----END PGP SIGNATURE-----