On Mon, 1 Mar 2010, Charles Gregory wrote:
> On Sun, 28 Feb 2010, LuKreme wrote:
> > Your best bet is to check if mail claiming to be from paypal is, in fact,
> > from paypal.
>
> Actually, I think his problem is that the reference to paypal has been
> buried in an attachment, described as 'type' of 'octet/binary' so that SA
> won't think it is text and scan it, and thus he doesn't *have* any
> 'visible' cue that the mail claims to be from paypal. And yes, I think
> that is a pretty serious problem.
>
> Looks like he may have to use a 'full' test to look for the references to
> paypal....
Been there, done that, doesn't work.
AFAIK SA ignores 'octet/binary' attachments for the rule engine. None of
the rules that I tried (uri, body, full, rawbody) "saw" anything that was
known to be in one of those attachments.
Thus my query.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
