Hmmm - not seeing that here -YET. As far as I'm aware all the SPAM with giff attachments we get have either a url or mail to link. Havn't had any reports of an increase in SPAM getting through the filters. May have to have a look through the 8000+ SPAM messages curently blocked to see if there are any with this format - and to check how they are getting detected. -Ec -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Roger Riggins Sent: 26 April 2006 9:51 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: OT: spam gifs I'm not able to find any hyperlinks in the email. I can't click on the picture or anywhere else that I've found. I viewed the html code in the email and this is all that is there: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META content="MSHTML 6.00.2600.0000" name=GENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=#ffffff> <DIV><FONT face=Arial size=2><IMG alt="" hspace=0 src="cid:001c01c66446$3573aee0$7aa4e248@umu"; align=baseline border=0></FONT></DIV> </BODY></HTML> Roger Riggins Network Administrator Lutheran Services in Iowa w: 319.859.3543 c: 319.290.5687 http://www.lsiowa.org -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Euan Cooper Sent: Tuesday, April 25, 2006 4:36 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: OT: spam gifs The giff (or other image) is inbedded within the e-mail (as displayed to the user) with html code. If a recipeint clicks anyware on the image it usually trys to open a url (sometimes it uses a Mail to: link instead). While no system can catch EVERY spam we are finding the software we are using IS catching better than 95% of spam with VERY few false positives. In our case simply stripping the image from inbound messages is NOT an option - firstly because we do receive a significant number image files as part of the work we do and secondly our staff would moan like heck if they still got hundreds of "blank" spam mail. BTW - what happens if a user clicks on the "white space" of one of the messages you have stripped the giff out of - does it still try yo open the url? -Ec Lutheran Services in Iowa Confidentiality Notice ================================================================== The information contained in this communication may be confidential, is intended only for the use of the recipient(s) named above, and may be legally privileged. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication, or any of its contents, is strictly prohibited. If you have received this communication in error, please return it to the sender immediately and delete the original message and any copy of it from your computer system. If you have any questions concerning this message, please contact the sender.