Re: spam mail with flagged style images

2009-08-21 Thread Karsten Bräckelmann
On Fri, 2009-08-21 at 02:46 -0400, Alex wrote: > > All scored the same. Can be written as a single rule. > > I've spent some time and tried to refine my rules based on your > advice, guenther. Can I ask you to check them over again and see if > this is any better, or at least more inclusive? The

Re: spam mail with flagged style images

2009-08-21 Thread McDonald, Dan
On Fri, 2009-08-21 at 03:00 -0400, MySQL Student wrote: > Hi, > > > mimeheader LOC_CTYP_IMG ((Content-Type =~ /image\/png/) || > > (Content-Type =~ /image\/jpg/) || (Content-Type =~ /image\/jpeg/) || > > I thought this passed through my --lint, but I only caught it the > second time. I was looki

Re: spam mail with flagged style images

2009-08-21 Thread LuKreme
On 20-Aug-2009, at 10:51, Marc Muñoz Salvador wrote: Following Martin Hepworth's instructions, I've pasted source of two e- mails: http://pastebin.ca/1536577 You removed far too many headers for anyone to make a meaningful comparison. -- Can I borrow your underpants for 10 minutes?

Re: spam mail with flagged style images

2009-08-21 Thread MySQL Student
Hi, > mimeheader LOC_CTYP_IMG  ((Content-Type =~ /image\/png/) || > (Content-Type =~ /image\/jpg/) || (Content-Type =~ /image\/jpeg/) || I thought this passed through my --lint, but I only caught it the second time. I was looking around for the (new) right way to do it, and found this in 80_addit

Re: spam mail with flagged style images

2009-08-20 Thread MySQL Student
Hi, >> mimeheader AS_090508_CTYP_PNG Content-Type =~ /image\/png/ >> mimeheader AS_090508_CTYP_JPG Content-Type =~ /image\/jpg/ >> mimeheader AS_090508_CTYP_JPEG Content-Type =~ /image\/jpeg/ > > All scored the same. Can be written as a single rule. I've spent some time and tried to r

Re: spam mail with flagged style images

2009-08-20 Thread RW
On Thu, 20 Aug 2009 20:58:02 -0500 Chris wrote: > Ran it through sa-learn as spam, spamassassn -r and -t which scored > much better: > ... > > 5.0 BAYES_99 BODY: Bayesian spam probability is 99 to Unfortunately that's not a good guide to future performance. Most spams contain a l

Re: spam mail with flagged style images

2009-08-20 Thread Chris
On Thu, 2009-08-20 at 12:47 +0200, Marc Muñoz Salvador wrote: > Hello to every body. Sorry If I'm repeating the subject, but I'm new > to the list, and I've been searching before about it with no success. > > I'm having lot of incoming spam with an attached image which is flag > styled (as the

Re: spam mail with flagged style images

2009-08-20 Thread Chris Owen
On Aug 20, 2009, at 1:07 PM, MySQL Student wrote: mimeheader AS_090508_CTYP_JPG Content-Type =~ /image\/jpg/ score AS_090508_CTYP_JPG 0.5 describe AS_090508_CTYP_JPG Rule by AS: Content-Type: JPG This can probably be scored higher than the others. image/jpg isn't a valid

Re: spam mail with flagged style images

2009-08-20 Thread Karsten Bräckelmann
On Thu, 2009-08-20 at 14:07 -0400, Alex wrote: > A few of these have slipped through on my systems, but for the most > part, these rules have worked here: > > mimeheader AS_090505_CDIS_INLINE Content-Disposition =~ /inline/ > mimeheader AS_090508_CTYP_PNG Content-Type =~ /image\/png/ > mimeh

Re: spam mail with flagged style images

2009-08-20 Thread MySQL Student
Hi, > Text added to e-mail is a bogus one, never repeated, same as the old styled > spam mail with attached images. The OCR doesn't detect nothing, I understand > because of flagged effect. Also, image file name changes, if it have. A few of these have slipped through on my systems, but for the m

Re: spam mail with flagged style images

2009-08-20 Thread John Hardin
On Thu, 20 Aug 2009, Marc Mu?oz Salvador wrote: Following Martin Hepworth's instructions, I've pasted source of two e-mails: http: //pastebin.ca/1536577 http: //pastebin.ca/1536583 The headers on both of those spamples have been severely abridged. You need to figure out how to get the comple

Re: spam mail with flagged style images

2009-08-20 Thread Martin Gregorie
On Thu, 2009-08-20 at 18:51 +0200, Marc Muñoz Salvador wrote: > Following Martin Hepworth's instructions, I've pasted source of two > e-mails: > > The two I looked at in any detail made it obvious the From: address was forged because it didn't agree with the earliest Received: header: not even t

Re: spam mail with flagged style images

2009-08-20 Thread Melkhior
-style JPEG that works well with my settings. Those two with only 2 prices are new to me. And there isn't enough occurrences of the offending words to match with my settings in FuzzyOcr :-( -- View this message in context: http://www.nabble.com/spam-mail-with-flagged-style-images-tp25059821

Re: spam mail with flagged style images

2009-08-20 Thread Marc Muñoz Salvador
Hello again. Thanks for your answers. Following Martin Hepworth's instructions, I've pasted source of two e- mails: http://pastebin.ca/1536577 http://pastebin.ca/1536583 Regards, -- Marc Muñoz ~ http://www.atcubic.com Tel. 902464246 Fax. 933967266 El 20/08/2009, a las 13:22, Martin Hep

Re: spam mail with flagged style images

2009-08-20 Thread Melkhior
ket, I'll try to produce a clean patch to FuzzyOcr & attach it & my scansets/preps to the ticket. -- View this message in context: http://www.nabble.com/spam-mail-with-flagged-style-images-tp25059821p25064803.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: spam mail with flagged style images

2009-08-20 Thread Paul
Martin Gregorie wrote: On Thu, 2009-08-20 at 12:22 +0100, Martin Hepworth wrote: 2009/8/20 Marc Muñoz Salvador Hello to every body. Sorry If I'm repeating the subject, but I'm new to the list, and I've been searching before about it with no success. I

Re: spam mail with flagged style images

2009-08-20 Thread Martin Gregorie
On Thu, 2009-08-20 at 12:22 +0100, Martin Hepworth wrote: > 2009/8/20 Marc Muñoz Salvador > Hello to every body. Sorry If I'm repeating the subject, but > I'm new to the list, and I've been searching before about it > with no success. > > I'm having lot of

Re: spam mail with flagged style images

2009-08-20 Thread Martin Hepworth
2009/8/20 Marc Muñoz Salvador > Hello to every body. Sorry If I'm repeating the subject, but I'm new to the > list, and I've been searching before about it with no success. > > I'm having lot of incoming spam with an attached image which is flag styled > (as the one attached). > > Text added to e

spam mail with flagged style images

2009-08-20 Thread Marc Muñoz Salvador
Hello to every body. Sorry If I'm repeating the subject, but I'm new to the list, and I've been searching before about it with no success. I'm having lot of incoming spam with an attached image which is flag styled (as the one attached). Text added to e-mail is a bogus one, never repeated,