> I am seeing this too. It's the only spam I get now. Stocks with GIF > images inline. > How annoying. I bumped up SARE_GIF_ATTACH to 4.75 points but > that's not enough to kill it.
> Anyone have a good rule for this?? Well, after some digging the lowest score I found for these was Content analysis details: (9.8 points, 4.6 required) pts rule name description ---- ---------------------- ------------------------------------------------ -- 1.2 HOST_EQ_IT HOST_EQ_IT 0.6 HELO_EQ_IT HELO_EQ_IT 0.0 HTML_90_100 BODY: Message is 90% to 100% HTML 1.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MPART_ALT_DIFF BODY: HTML and text parts are different 5.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100% [score: 1.0000] 0.8 SARE_GIF_ATTACH FULL: Email has a inline gif 0.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?81.119.101.155>] 0.9 FM_NO_STYLE FM_NO_STYLE I guess I could write some rules for these, they look pretty trivial to catch. Loren