Hi,

A lot of the remaining spam that is getting through our setup is
basically an empty body with a single small gif attachment.

The only rules that get triggered are SB_GIF_AND_NO_URIS and
SARE_GIF_ATTACH.

Has anyone made a rule that detects an empty body? If I'm not mistaking,
there are a couple of rules that do that, but only for html mail...

Thanks,

Marc.