On Thu, 19 Oct 2006, Steve Lake wrote:
SL> Well, so far no hits on this and those messages are still coming
SL> through. -_-;; Guess my little trick to filter those out didn't work
SL> afterall. Bummer.
SL>
SL> > > * B ?? ()<img (.*)alt=\"\"
I go for a "have I seen the same 500 character token before" approach. A
few of these things recently slipped past Spam Assassin (silly me, I'd
configured it to not look at messages larger than 300k) but as the same
500 character token had been seen in 340 emails already, it was caught.
It could have been the zip file rather than the gif but I don't really
care.
--
Alan
( Please do not email me AS WELL as replying to the list. Please
address personal email to alan+1@ as lists@ is not read. A
password autoresponder may be invoked if this email is very old. )
____________________________________________________________
procmail mailing list Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail