-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Tue, Aug 07, 2007 at 03:55:39PM -0400, Eric d'Alibut wrote:
I'm sure anyone with responsibility for spam filtering has seen
messages, many of them, which meet the following criteria:
HTML formatted
empty body
one attachment, which is a pdf file
Does anyone have a maildrop recipe for this crap?
If you're running spamassassin, you can use the CVS version of FuzzyOcr
which extracts and detects these spams. However, I have seen someone
with a simple simple SIMPLE spamassassin recipe that is supposed to
detect them. Check in the FuzzyOcr archives. I've also seen that
SaneSecurity releases custom clamav signatures that catch a lot of
Phishing emails, and he also accepts submissions of the PDF spams and
creates sigs for those. Google for SaneSecurity and see about using
those custom sigs.
- --
Regards... Todd
Open Source: The concept of standing on others' shoulders instead of toes.
Linux kernel 2.6.17-6mdv 1 user, load average: 0.43, 0.30, 0.18
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
iD8DBQFGuNPvY2VBGxIDMLwRApkmAJ0d1MWbzTOtRA2cVZ8a9giX9Fi1iQCfUZSM
zaelD5Er1nj8E+09uXjrvfk=
=hk8B
-----END PGP SIGNATURE-----
6 messages in net.sourceforge.lists.courier-maildropRe: [maildropl] Spam recipe
