[Mimedefang] How can I stop these annoying emails?
Joseph Brennan
brennan at columbia.edu
Wed Feb 25 09:04:54 EST 2004
--On Tuesday, February 24, 2004 3:51 PM -0800 Matthew Rossiter
<matt at rossiters.com> wrote:
> I can't seem to stop these emails. The come from all over the place and
> they always contain something like this.
>
> <html><body>
> <center><!--3urd0O7Akb1F7yR--><a href="http://www.jupitrrj.com"><img
> src="http://www.along5tr.com/v9.gif" border=0></a></center>
> <body></html>
More of a Spamassassin thing. The messages might be qp or base64
too, and SA takes care of that.
This is pretty good (our local mods start CU_):
# Links to image from web
rawbody CU_IMAGELINK_WEB /<a href=[^>]{6,80}>\s{0,80}<img
[^>]{0,40}http/i
describe CU_IMAGELINK_WEB Click on an image on the web
score CU_IMAGELINK_WEB 1.0
# Links to image from web, and that is the entire message
meta CU_IMAGELINK_ONLY CU_IMAGELINK_WEB && HTML_IMAGE_ONLY_02
describe CU_IMAGELINK_ONLY Click on an image on the web, and that's all
score CU_IMAGELINK_ONLY 4.0
Joseph Brennan
Academic Technologies Group, Academic Information Systems (AcIS)
Columbia University in the City of New York
More information about the MIMEDefang
mailing list