Filter for spam sent as image

Filter for spam sent as image

Post by Marshall D » Tue, 30 May 2006 21:22:41

I have been receiving stock tips and other spam sent as images with no
text in the message body. After examining the headers I developed the
following filter. Just to be sure, I send the messages to a mailbox
for manual inspection.

rule Content-Type: multipart/related
subject & [150]
transfer anomalous.fol\possible spam.mbx
stop
incoming
manual
header Content-Type:
verb regex_icase
value multipart/related
conjunction and
header Content-Type:
verb regex_icase
value multipart/alternative