On Fri, 13 Oct 2006, Jo for Groups and Lists wrote: > Date: Fri, 13 Oct 2006 12:01:32 -0400 > From: Jo for Groups and Lists <[EMAIL PROTECTED]> > To: users@spamassassin.apache.org > Subject: RE: Having issue with a type of spam I havn't seen before > > Are you using Outlook by any chance? If you are, mostly "src=CID" > only appears in the View-Source via Outlook. It's a reference to the > downloaded image saved in the temp files on your desktop. If you > look at the raw mail file on the server before downloading the > message, there is a regular "img src='http:// ". So SA would never > detect 'CID' anyway - it only exists after downloading. > > BTDT - I found this out when a procmail recipe I tried kept failing!
Not true in all cases. It's how HTML email references an image that is attached to the message. -- John Hardin KA7OHZ ICQ#15735746 http://www.impsec.org/~jhardin/ [EMAIL PROTECTED] FALaholic #11174 pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- Perfect Security is unattainable; beware those who would try to sell it to you, regardless of the cost, for they are trying to sell you your own slavery. -----------------------------------------------------------------------