image-only spam -- ideas, what to do?

[John Villalovos]

On 12/12/06, Tom Anderson <tanderso at oac-design.com> wrote:
> John Villalovos wrote:
> > I add this to my /etc/procmailrc.  It adds a header if there is an inline image.
> >
> > :0 HB
> > # If it has an inline image, put in a header to indicate so.
> > * src=(3D)?\"cid:.*@.*\"
> > {
> >     :0 fwh
> >     # Make sure space at end of header.
> >     | formail -I"X-Inline-Image: "
> > }
>
> I'm not sure that's even necessary.  Bogofilter already scores "src",
> "mime:image", "mime:Content-ID", "baseline", "mime:gif", "head:related",
> and other inline-image-related tokens.  It certainly can't hurt to add
> one more though.

You are probably correct, looking at a message that ended up in my
unsure folder:
  "src"                              6133  0.240113  0.480200  0.666647 -
  "head:related"                     2309  0.078569  0.194878  0.712650 -
  "mime:image"                       1640  0.019196  0.182011  0.904542 +
  "mime:Content-ID"                  1606  0.016469  0.181012  0.916550 +
  "mime:gif"                         1505  0.015315  0.169769  0.917195 +
  "baseline"                          608  0.001259  0.074453  0.983212 +
  "head:X-Inline-Image"               476  0.000839  0.058463  0.985641 +

So I'm not sure that my additional header is really making a big
difference or not.