On Fri, 13 Oct 2006, Jo for Groups and Lists wrote:

> Date: Fri, 13 Oct 2006 12:01:32 -0400
> From: Jo for Groups and Lists <[EMAIL PROTECTED]>
> To: users@spamassassin.apache.org
> Subject: RE: Having issue with a type of spam I havn't seen before
> 
> Are you using Outlook by any chance? If you are, mostly  "src=CID"
> only appears in the View-Source via Outlook. It's a reference to the
> downloaded image saved in the temp files on your desktop. If you
> look at the raw mail file on the server before downloading the
> message, there is a regular  "img src='http:// ". So SA would never
> detect 'CID' anyway - it only exists after downloading.  
> 
> BTDT - I found this out when a procmail recipe I tried kept failing!

Not true in all cases. It's how HTML email references an image that is
attached to the message.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]    FALaholic #11174    pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Perfect Security is unattainable; beware those who would try to sell
  it to you, regardless of the cost, for they are trying to sell you
  your own slavery.
-----------------------------------------------------------------------

Reply via email to