Re: pdf spams

Brian Burton <[email protected]> Mon, 13 Aug 2007 09:42:57 -0400
Newsgroups gmane.mail.spam.spamprobe.general
Message-ID <[email protected]>
John Carter wrote:
> I seem to be getting hit by a flood of pdf spam coming through
> spamprobe. Any suggestions? (I'm getting tempted to just dump all pdf's using procmail
> at this stage.)

I use the same technique for these as for inline image spams.  I have
attached the relevant portion of my .procmailrc.  There is a recipe
that detects non-spam that contain an inline image or pdf attachment
and runs SP in its controversial "whitelist" mode and rejects any that
fail that test. I use a separate mailbox for those so that I can
review them from time to time.

All the best,
++Brian

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/