On 25-sep-2006, at 22:31, Roberto C. Sanchez wrote:
On Mon, Sep 25, 2006 at 02:14:49PM -0600, Paul E Condon wrote:
Over tha past few weeks, I have started receiving spam email that
contains text the is all well formed words, but doesn't make sense as
a spam message, or as any other sort of communication. I think I have
found what is going on:
The email *does* contain a message. It is contained in a .gif or .png
or other image format file. These are not pictures of naked ladies,
but images of text that touts various penny stocks. If I didn't use
mutt, I might not have had so much puzzlement over them. I suppose
with Outlook all the user sees is the image, which is clearly spam,
but the user doesn't see what the spam filter sees, so, it seems, no
amount of filter fiddling will protect against this. What to do? Are
there new filtering techniques beyond spamassassin?
Reject anything with a .gif or .png attachment?
Yeah, would like to do that. But how can one achieve this with either
postfix, spamassassin or cyrus/sieve? I thought sieve couldn't check
attachment names or type.
btw, these images are pretty nifty. They are multi gifs; the first
one is (almost) empty to stop ocr reading the real message. In the
text gif part there are little lines, probably to stop ocr or image
fingerprinting. I must say, these guys aren't dump... :-(
Peter
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]