I do have html turned off, how do you turn off "inline attachments" and "web bugs"?
You can't turn off web bugs, per se. From web-bug definitions I swiped from the net:
QUOTE
A graphic on a Web page or in an e-mail message designed to monitor who is reading the page or message. These bugs may be tiny and invisible (transparent) graphics 1-by-1 pixels in size. A third party which wants to gather information about users of the web page may put the bugs there.
www.qcc.mass.edu/booth/142B1/glossary.htmlA web bug (also known as a tracking bug, pixel tag, web beacon or clear gif) is a technique for determining who viewed an HTML-based email message or a web page, when they did so, how many times, how long they kept the message open, etc.
en.wikipedia.org/wiki/Web_bug
I cannot find any control in Apple's Mail to disallow inline attachments. The only control is one in the Preferences, under View, that disallows remote images from third parties, whatever that means.
I think it means that if a spammer sends an email with a picture containing a web bug, it would get through unless the address from which the picture was sent is different than the address from which the mail was sent. In any event, it cannot be turned off completely, though Mail's Help says it can. The directions in Mail's Help describe an HTML control that hasn't existed for years.
As well, there is no way in Apple's Mail to force incoming email to display as plain text rather than HTML, though I believe plain-text email can be sent.
So I discarded Mail and use Mozilla's Thunderbird or the email apps in Mozilla's SeaMonkey and WaMCom's Mozilla for OS 9. These give me the choice whether to allow inline attachments in incoming email.
When an attachment of any kind arrives, I can kill it without having to display it, or save it to the desktop or anywhere then view it with another app, such as Preview. Whatever I do with it divorces it from the message, thwarting any web bugs or any other email-dependent attachment malware.
Also, these Mozilla email apps are set up to allow only plain-text outgoing email. I haven't used Eudora (or any other email apps other than Mozilla's) since Eudora introduced its policy of paying to use it or else accept its ads. So I have no idea how any other email app handles these things.