On Mon, Dec 18, 2006 at 10:41:40AM -0800, san wrote: > Iam getting lot of spams with .Gif attachment. will the follwing rule will > be able to catch such spam, when i tried its not pulling up anything sort > of, can anybody correct is this rule is correct to catch gif spam.
No, it won't work.
> body GIF_ATTACH /name=\"?[0-9a-z._\-]{3,18}\.gif\"?/i
MIME headers aren't part of the "body" as far as SA is concerned. There are
already a number of rules to deal with this stuff available via sa-update. If
you want to roll your own, look at the MIMEHeader plugin.
--
Randomly Selected Tagline:
A few cans short of a six pack, Six short.
pgpLOiODjiOUm.pgp
Description: PGP signature
