Re: [maildropl] Spam recipe

[Todd L. <tl...@iv...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Aug 07, 2007 at 03:55:39PM -0400, Eric d'Alibut wrote:

>I'm sure anyone with responsibility for spam filtering has seen
>messages, many of them, which meet the following criteria:
>
>HTML formatted
>empty body
>one attachment, which is a pdf file
>
>Does anyone have a maildrop recipe for this crap?

If you're running spamassassin, you can use the CVS version of FuzzyOcr
which extracts and detects these spams.  However, I have seen someone
with a simple simple SIMPLE spamassassin recipe that is supposed to
detect them.  Check in the FuzzyOcr archives.  I've also seen that
SaneSecurity releases custom clamav signatures that catch a lot of
Phishing emails, and he also accepts submissions of the PDF spams and
creates sigs for those.  Google for SaneSecurity and see about using
those custom sigs.
- -- 
Regards...		Todd
Open Source: The concept of standing on others' shoulders instead of toes.
Linux kernel 2.6.17-6mdv   1 user,  load average: 0.43, 0.30, 0.18
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGuNPvY2VBGxIDMLwRApkmAJ0d1MWbzTOtRA2cVZ8a9giX9Fi1iQCfUZSM
zaelD5Er1nj8E+09uXjrvfk=
=hk8B
-----END PGP SIGNATURE-----