[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-users
Subject:    Re: png images
From:       Jari Fredriksson <jarif () iki ! fi>
Date:       2010-07-17 12:03:03
Message-ID: 4C419BF7.4050604 () iki ! fi
[Download RAW message or body]


On 17.7.2010 2:28, Peter Lowish wrote:
> Perfect - thank you so much
> 
> P
> 

Note, that the L_PAYLOAD_CTYPE_PNG rule has no descriuption and score,
my code was wrong, the code describes and scores HTML-version again.

This error was in my actual script... I just noticed it myself.

Also the ifplugin endif is missing, it is in the end of the previous line.

> -----Original Message-----
> From: Jari Fredriksson [mailto:jarif@iki.fi] 
> Sent: Saturday, 17 July 2010 4:09 a.m.
> To: users@spamassassin.apache.org
> Subject: Re: png images
> 
> On 16.7.2010 4:04, Peter Lowish wrote:
>> I am wondering if someone has a rule to deal with the current spam 
>> being sent with just a small png attachment the name of which changes
>>
>>  
>>
>> There is no text in the email, just the attachment - the subject line 
>> is always different
>>
>>  
>>
> 
> header     __CTYPE_MULTIPART_ANY Content-Type =~ /multipart\/\w/i
> ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
> mimeheader __ANY_TEXT_ATTACH     Content-Type =~ /text\/\w+/i
> meta     L_MIME_NO_TEXT (__CTYPE_MULTIPART_ANY && !__ANY_TEXT_ATTACH)
> score    L_MIME_NO_TEXT 5.00
> describe L_MIME_NO_TEXT No text body parts endif
> 
> header   L_PAYLOAD_CTYPE_RTF  Content-Type =~ /\bname=".+\.rtf"/i
> describe L_PAYLOAD_CTYPE_RTF  Payload is an RTF document, no text part
> score    L_PAYLOAD_CTYPE_RTF  5.0
> 
> header   L_PAYLOAD_CTYPE_HTML  Content-Type =~ /\bname=".+\.html"/i
> describe L_PAYLOAD_CTYPE_HTML  Payload is an HTML document, no text part
> score    L_PAYLOAD_CTYPE_HTML  5.0
> 
> header   L_PAYLOAD_CTYPE_PNG  Content-Type =~ /\bname=".+\.png"/i
> describe L_PAYLOAD_CTYPE_HTML  Payload is a PNG image, no text part
> score    L_PAYLOAD_CTYPE_HTML  5.0
> 
> 
> 
> 
> 
> --
> http://www.iki.fi/jarif/
> I use PGP. If there is an incompatibility problem with your mail client,
> please contact me.
> 
> Q:	What do you call a half-dozen Indians with Asian flu?
> A:	Six sick Sikhs (sic).
> 
> 


-- 
http://www.iki.fi/jarif/
I use PGP. If there is an incompatibility problem with your mail
client, please contact me.

You feel a whole lot more like you do now than you did when you used to.


["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]