Add gifs to the attachment-blocking of 8.22.
Spammers have adapted by using jpgs as in the sample.
Content-Type: image/jpeg; name="4649.jpg"
adamc
Matrosity Hosting wrote:
since nearly 99% of spam attaches an inline gif, what about writing a
rule to mark it as spam?
Bill
Adam Campbell wrote:
Add the sender's IP to a custom DNSBL. Tell antispamseeder it's a spam
message.
Do you check for valid helo? For valid reverse dns? For valid from?
I use only IMail for spam-filtering. Any message that fails a test
(except valhelo - happens too much on good messages) is diverted. Any
message that is diverted in a user's mailbox is also diverted in the
archive mailbox. I regularly check the archive mailbox for any good
messages. Any good messages diverted I revert/restore in the user's
mailbox.
I'm looking into a better solution.
adamc
Martin Schaible wrote:
Hi,
We analyzed the mail too and we couldn't find any phrase or html
construct to create a rule.
I'm alos wondering how other spam filters are dealing with mails like
this.
============================================
Am Montag, 27. Mrz 2006 um 02:47 schrieben Sie:
here is header--- and below is spam
This gets right through all my filters
Received: from web.florida.com [209.208.92.66] by florida.com with ESMTP
(SMTPD-9.02) id A8B4046C; Sun, 26 Mar 2006 13:08:52 -0500
Received: (qmail 5470 invoked from network); 26 Mar 2006 19:46:36 -0000
Received: from 112.red-213-96-60.staticip.rima-tde.net (213.96.60.112)
by web.florida.com with SMTP; 26 Mar 2006 19:46:36 -0000
From: "Robbins Erik" <[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>>
To: "Roberson Erin" <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>
Subject: Re[8]:
Date: Sun, 26 Mar 2006 18:17:48 +0000
Message-ID:
<[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>>
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0DE1_2567A893.4BCF0DE1"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1441
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-RCPT-TO: <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>
Status: U
X-UIDL: 440558391
X-IMail-ThreadID: d8b4090c00000ab7
However he was not able to pronounce the words before the stranger
spoke: 'Of course man is mortal, but that's only half the problem.
The trouble is that mortality sometimes comes to him so suddenly! And
he cannot even say what he will be doing this evening.' 'What a
stupid way of putting the question. ' thought Berlioz and objected :
'Now there you exaggerate. I know more or less exactly what I'm going
to be doing this evening. Provided of course that a brick doesn't
fall on my head in the street. . .' 'A brick is neither here nor
there,' the stranger interrupted persuasively. ' A brick never falls
on anyone's head. You in particular, I assure you, are in no danger
from that. Your death will be different.' 'Perhaps you know exactly
how I am going to die? ' enquired Berlioz with understandable sarcasm
at the ridiculous turn that the conversation seemed to be taking. '
Would you like to tell me?' 'Certainly,' rejoined the stranger. He
looked Berlioz up and down as though he were measuring him for a suit
and muttered through his teeth h rhshs htk tmojrjtkfj p jfj jfnjjjmjj
sdjksdfsdfsdlgkj sdflkjsdf lksdjfsdfsdf
============================================
--
Mit freundlichen Grssen
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
