On Thu, 2009-08-20 at 12:47 +0200, Marc Muñoz Salvador wrote: > Hello to every body. Sorry If I'm repeating the subject, but I'm new > to the list, and I've been searching before about it with no success. > > I'm having lot of incoming spam with an attached image which is flag > styled (as the one attached). > > Text added to e-mail is a bogus one, never repeated, same as the old > styled spam mail with attached images. The OCR doesn't detect nothing, > I understand because of flagged effect. Also, image file name changes, > if it have. > > Any ideas about how to mark this kind of e-mail as spam? > > > Thank you very much. > -- > Marc Muñoz ~ http://www.atcubic.com > Tel. 902464246 > Fax. 933967266 > One of these made it into my inbox today with this score:
X-spam-status: No, score=3.6 required=5.0 tests=BAYES_50=1,
DCC_CHECK_NEGATIVE=-0.0001,DYN_RDNS_AND_INLINE_IMAGE=0.001,
KHOP_HELO_FCRDNS=0.6,RCVD_IN_PBL=0.905,RDNS_DYNAMIC=0.1,RELAYED_BY_DIALUP=1
BAYES_50,DCC_CHECK_NEGATIVE,DYN_RDNS_AND_INLINE_IMAGE,KHOP_HELO_FCRDNS,
RCVD_IN_PBL,RDNS_DYNAMIC,RELAYED_BY_DIALUP
Ran it through sa-learn as spam, spamassassn -r and -t which scored much
better:
Content analysis details: (25.0 points, 5.0 required)
5.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 0.9999]
20 CLAMAV Clam AntiVirus detected a virus
It was short circuited by the clamav plugin which called it:
X-Spam-Virus: Yes (Sanesecurity.Img.10835.UNOFFICIAL)
--
KeyID 0xE372A7DA98E6705C
signature.asc
Description: This is a digitally signed message part
