Pegasus Mail & Mercury

We get lots of emails with images embedded in them.

All of them are embedded as:

<IMG alt=”" hspace=0 src=”cid:006901c6d391$dee64770$6c822ecf@Z2LC74Q” align=baseline border=0>

So Mercury32 can't strip them.

Looking around I found this:

CID will probably go unnoticed through many mail servers except for high grade servers who set rules to filter CID tags. Here the CID tag will usually get turned into an attachment helping you spot an intruding image.
 

Is there anyway this could be added to Mercury32 ??

Thanks 

---

www.medionsupport.com

You need a daemon to catch this. I think SpamHalter already is checking embedded images, though.

/Rolf

We have spamhalter installed, what do I need to do do strip these ??

Thanks 

---

www.medionsupport.com

Spamhalter doesn't strip images, it just does a Bayesian analysis of the image characteristics. Stripping inline images altogether or converting them to attachments also breaks many commercial (legal) newsletters etc. If you use Mercury's content control you can use something like this

IF BODY MATCHES "/b*src[=3D ]+[\"c]+id:*" WEIGHT 50 Tag "BODY: Contains Inline Image"

to give mails containing inline images additional spam points.

Best regards

Nico

Thanks tBB.

That will help... but is there any way to strip or convert them to attachments ?
I'm not to bothered about newletters etc..

Regards
 

---

www.medionsupport.com

tBB:

Spamhalter doesn't strip images, it just does a Bayesian analysis of the image characteristics. Stripping inline images altogether or converting them to attachments also breaks many commercial (legal) newsletters etc. If you use Mercury's content control you can use something like this

IF BODY MATCHES "/b*src[=3D ]+[\"c]+id:*" WEIGHT 50 Tag "BODY: Contains Inline Image"

to give mails containing inline images additional spam points.

Best regards

Nico

 

I found that this does a great job in helping me detect the "enhancement & meds type" image spam. I use it in a CC rule set that gives SpamHalter 50% trigger value and this the other 50% and it seems to work very well. Thanks much!

---

Harvesters come get this address!

mapspots@tfs.pvt.k12.ga.us