Steve Lake steve.lake at raiden.net writes:
Yeah, I'm seeing that too. Any ideas on how to do that? For now
I've been falling back on a procmail hack to toss all messages with
images embedded in the HTML of the message into their own folder.
I just wrote a little program which
-
Steve Lake steve.lake at raiden.net writes:
Yeah, I'm seeing that too. Any ideas on how to do that?
I just wrote a little program which
- examines a GIF animation and stores its size
- stores delay time, size, left offset, and top offset of each single picture
- calls gifasm to extract the
@spamassassin.apache.org
Subject: Re: This image is turning frequent..
Anders Norrbring wrote:
This type of image spam is getting more common, and is not detected.. At
least not here..
score SARE_GIF_STOX 2.5 2.5 2.5 2.5
That's all it took, and we don't see it any more.
--
Jo Rhett
Network/Software Engineer
* Jo Rhett [EMAIL PROTECTED] [10-17-2006 10:25]:
score SARE_GIF_STOX 2.5 2.5 2.5 2.5
Can you tell me what each corresponding 2.5 represents?
--
Regards,
Matt Florido
Matt Florido wrote:
* Jo Rhett [EMAIL PROTECTED] [10-17-2006 10:25]:
score SARE_GIF_STOX 2.5 2.5 2.5 2.5
Can you tell me what each corresponding 2.5 represents?
http://spamassassin.apache.org/tests_3_1_x.html
Pay particular attention to the rightmost column heading in the table.
-Jim
Matt Florido wrote:
* Jo Rhett [EMAIL PROTECTED] [10-17-2006 10:25]:
score SARE_GIF_STOX 2.5 2.5 2.5 2.5
Can you tell me what each corresponding 2.5 represents?
man Mail::SpamAssassin::Conf
score SYMBOLIC_TEST_NAME n.nn [ n.nn n.nn n.nn ]
Assign scores (the number of points for
On Wed, October 18, 2006 10:18 am, Jim Maul wrote:
Matt Florido wrote:
* Jo Rhett [EMAIL PROTECTED] [10-17-2006 10:25]:
score SARE_GIF_STOX 2.5 2.5 2.5 2.5
Can you tell me what each corresponding 2.5 represents?
http://spamassassin.apache.org/tests_3_1_x.html
Pay particular attention
Yeah, I'm seeing that too. Any ideas on how to do that? For now
I've been falling back on a procmail hack to toss all messages with images
embedded in the HTML of the message into their own folder.
At 04:02 PM 10/17/2006 +0200, Anders Norrbring wrote:
This type of image spam is
score)
Chris Santerre wrote:
Exactly... and that SARE ruleset is coming very soon :)
--Chris
-Original Message-
From: Jo Rhett [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 17, 2006 1:28 PM
To: Kelson
Cc: users@spamassassin.apache.org
Subject: Re: This image is turning
This type of image spam is getting more common, and is not detected.. At
least not here..
--
Anders Norrbring
Norrbring Consulting
smime.p7s
Description: S/MIME Cryptographic Signature
Title: RE: This image is turning frequent..
This type of image spam is getting more common, and is not
detected.. At
least not here..
A solution is on its way :) Stay tuned..
Might be end of day.
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
is turning frequent..
This type of image spam is getting more common, and is not detected.. At
least not here..
--
Anders Norrbring
Norrbring Consulting
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Anders Norrbring wrote:
This type of image spam is getting more common, and is not
detected.. At least not here..
Yes, this picture is indeed hard to detect...
I'd need a blackbox like
Input: Animated gif of any kind
Output: NonAnimated gif
-BEGIN PGP SIGNED MESSAGE-
But that is a difficult task considering how many things are possible
with the GIF standard. This picture uses offsets and slow frame rates,
others use transparency etc. A simple way to block these images would
be to scan the GIF for offset frames. I don't think
decoder wrote:
But that is a difficult task considering how many things are possible
with the GIF standard. This picture uses offsets and slow frame rates,
others use transparency etc. A simple way to block these images would
be to scan the GIF for offset frames. I don't think there is any valid
Anders Norrbring wrote:
This type of image spam is getting more common, and is not detected.. At
least not here..
score SARE_GIF_STOX 2.5 2.5 2.5 2.5
That's all it took, and we don't see it any more.
--
Jo Rhett
Network/Software Engineer
Net Consonance
I think you guys are going down a much harder road. This only makes
sense if and when e-mail with only a GIF is a normal type of e-mail that
people find acceptable. Otherwise, just score e-mail with only a GIF
and/or some extra bayes poison high and don't bother analyzing it.
Kelson wrote:
Title: RE: This image is turning frequent..
Exactly... and that SARE ruleset is coming very soon :)
--Chris
-Original Message-
From: Jo Rhett [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 17, 2006 1:28 PM
To: Kelson
Cc: users@spamassassin.apache.org
Subject: Re
: Jo Rhett [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 17, 2006 1:28 PM
To: Kelson
Cc: users@spamassassin.apache.org
Subject: Re: This image is turning frequent..
I think you guys are going down a much harder road. This only makes
sense if and when e-mail with only a GIF
Chris Santerre wrote:
I'm embarrassed to ask but, what cf file is that from?
[EMAIL PROTECTED] /usr/local/etc]$ find /var/lib/spamassassin -type f
-exec grep -l SARE_GIF_STOX {} \;
/var/lib/spamassassin/3.001004/70_sare_stocks_cf_sare_sa-update_dostech_net/200609222100.cf
--
Jo Rhett
Chris Santerre wrote:
I'm embarrassed to ask but, what cf file is that from?
[EMAIL PROTECTED] rulesets]$ grep SARE_GIF_STOX * -R | grep meta
70_sare_stocks.cf/20060803.cf:meta SARE_GIF_STOX (
SARE_GIF_ATTACH __IMG_ONLY )
70_sare_stocks.cf/200608271034.cf:meta SARE_GIF_STOX
Title: RE: This image is turning frequent..
-Original Message-
From: Jo Rhett [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 17, 2006 2:41 PM
To: Chris Santerre
Cc: users@spamassassin.apache.org
Subject: Re: This image is turning frequent..
Chris Santerre wrote:
I'm
22 matches
Mail list logo
