Scanning images

[Monis Monther]

Hi:

Today I got some emails that had attached images containing unwanted
material


My MailScanner tagged it as clean

RBL did not find tag the domain or IP as black list ( I use spamhaus-zen and
CBL)

SA scores were as follows
0.10RDNS_NONE  2.90TVD_SPACE_RATIO
The body was empty only an attachment of a jpg image containing the unwanted
material

I use RBL test and SA no bayes or MCP

1- How can detect such messages?

2- Can anyone explain a little bit what MCP does and when or why do I need
it. All I read is what was written in the MailScanner.conf documentation and
that it uses another copy of SA to rescan the body (attachments are part of
the body, correct me if I misunderstand attachments), doesn't SA already
scan the body?? why scan again the same thing with different rules? why not
have all these rules under SA in the first place and do one full scan?
please shed some light so I can understand the mechanism

Thanks

Best Regards

Monis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100209/3e9575f4/attachment.html