Re: Image spam and failing rule

[Charles Gregory <cg...@hwcn.org>]

On Sun, 26 Apr 2009, Theo Van Dinter wrote:
> It's already been mentioned, but mimeheader is the right way to look
> at the headers of MIME parts.

Look more closely at my rule. It is checking for TWO headers,
one after the other (separated by \n), identifying a gif with no name.

>> full /Content-Type: image\/gif;\n[^a-z]+name=""/

But yes, I will be keeping 'mimeheader' in mind for tests like
the simple 'DS[LC]' png check. :)

- Charles

Re: Image spam and failing rule

[James Wilkinson <sa...@aprilcottage.co.uk>]

Theo Van Dinter wrote:
> It's already been mentioned, but mimeheader is the right way to look
> at the headers of MIME parts.

Charles Gregory wrote:
> Look more closely at my rule. It is checking for TWO headers,
> one after the other (separated by \n), identifying a gif with no name.
>
>>> full /Content-Type: image\/gif;\n[^a-z]+name=""/

I think you’ll find that’s one header on two lines, and mimeheader copes
with it.

Hope this helps,

James.

-- 
E-mail:     james@ | “As for Nitel, the state telephone monopoly, the less
aprilcottage.co.uk | said the better, which might well be the company’s
                   | motto.”
                   |     -- The Economist, about Nigeria