Re: pdf spams

I have been hearing that spammers are generally switching away from image
spams toward pdf spams.  When the time comes that I start seeing them
myself I will start blocking all emails with pdf attachments, just as I
currently block all emails with inline attached images (potential image
spams).

But for now, pdf spams are not getting through:

* greylisting (postgrey)
* reject_unknown_client
* zen.spamhaus.org blacklisting
* clamav
* spamprobe
* spamassassin

And I'm not having problems with false positives.

If mail gets to the last two filters, they both need to agree it's spam or
I will check it.

I had been running greylisting for some time.  For some reason I turned it
off, and was really surprised that the amount of spam I was getting didn't
increase.  But then it gradually increased.  A lot.  Then I turned
greylisting back on again, and it all went away, again.  So spammers do
learn who is greylisting and stop pounding on you.  Also, greylisting is
good stuff.

Google gives 2,250 hits on my email address, and it is at the bottom of my
main web page.  Spammers have known where to find me for a long time.

For new people, more of my babbling is here:
http://www.chaosreigns.com/spam/

On 08/13, John Carter wrote:
> I seem to be getting hit by a flood of pdf spam coming through
> spamprobe. Any suggestions? (I'm getting tempted to just dump all pdf's using procmail
> at this stage.)

-- 
"Life is either a daring adventure or it is nothing at all."
- Helen Keller
http://www.ChaosReigns.com

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/