From: "Gary V" <[EMAIL PROTECTED]>
>
I can see it now: spammers reduced to sending obfuscated text rendered
as an animated GIF embedded in a Word document in a Zip file attached
to an email whose subject is "Invoice #437892" with no body text... :)
--
John Hardin KA7OHZICQ#15735746htt
> I can see it now: spammers reduced to sending obfuscated text rendered
> as an animated GIF embedded in a Word document in a Zip file attached
> to an email whose subject is "Invoice #437892" with no body text... :)
And 500,000 people would STILL buy what they're selling. :^(
--
Dave Pooser
Ca
I can see it now: spammers reduced to sending obfuscated text rendered
as an animated GIF embedded in a Word document in a Zip file attached
to an email whose subject is "Invoice #437892" with no body text... :)
--
John Hardin KA7OHZICQ#15735746http://www.impsec.org/~jhardin/
Great, n
From: "Theo Van Dinter" <[EMAIL PROTECTED]>
On Sat, Aug 26, 2006 at 07:14:18PM -0700, jdow wrote:
Is there some magic to the .pre files that makes it important to have
the load_plugins there?
Yes, pre files are loaded before anything else, so the plugins loaded from
there can be used in all cf
On Sat, 26 Aug 2006, Loren Wilton wrote:
> > That's what I was thinking, and would allow leverage by a lot of
> > plugins (e.g. the Word plugin I am prepping to start)...
> >
> > Create some PerMsgStatus string variable or some such that the body
> > rules would be run over...
>
> Actually the ea
On Sat, Aug 26, 2006 at 07:14:18PM -0700, jdow wrote:
> Is there some magic to the .pre files that makes it important to have
> the load_plugins there?
Yes, pre files are loaded before anything else, so the plugins loaded from
there can be used in all cf files.
--
Randomly Generated Tagline:
"Jo
Managing local plugins is getting to be a minor hassle. What I've done
is create a subdirectory /etc/mail/spamassassin/local_plugins. This
works and minimizes clutter.
I've also noticed that maintaining load_plugin in a separate file
than the plugin's .cf files is also a hassle. Is there some mag
From: "decoder" <[EMAIL PROTECTED]>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Expertsites, Inc. wrote:
From: "decoder" <[EMAIL PROTECTED]>
Hello,
I just uploaded FuzzyOcr 2.3b to the download site. If you find
bugs or run into problems, please mail back :)
This release failed to recog
From: "John Fleming" <[EMAIL PROTECTED]>
My server is getting more and more "stock spam" with an image and a few
paragraphs of bayes-obfuscating text. I've been chasing them by either
learning them or increasing the score of SARE or other rules that hit.
Today I got several that didn't hit an
Rose, Bobby wrote:
> What am I missing? I updated but not png isn't working. If I switch to
> debug logging 2 I see in the log when I run the sample thru.
>
> [2006-08-26 18:16:40] Debug mode: Analyzing file with content-type
> "image/png"
> [2006-08-26 18:16:40] Debug mode: Image type not recog
I believe there is at least one other plugin that includes its own copy of
M:SA:Timeout when installed on a backlevel version of SA. Probably a
reasonable solution.
Loren
Sure. giftopnm will do it. The FuzzyOCR plugin is using some other tool
that will also do it, I don't recall what just at the moment.
Loren
Now if you could just ocr the whole thing as text, and pass it
back to SA to score!
That's what I was thinking, and would allow leverage by a lot of
plugins (e.g. the Word plugin I am prepping to start)...
Create some PerMsgStatus string variable or some such that the body
rules would be run ov
My server is getting more and more "stock spam" with an image and a few
paragraphs of bayes-obfuscating text. I've been chasing them by either
learning them or increasing the score of SARE or other rules that hit.
Today I got several that didn't hit anything useful and were learned as ham:
X-
decoder wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello,
I was just informed that the latest FuzzyOcr version, 3.2b, includes a
function (module from SA) which is only available in 3.1.4, not in
3.1.0. The missing module is Mail::SpamAssassin::Timeout. Currently,
the only way to fix
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Rose, Bobby wrote:
> What am I missing? I updated but not png isn't working. If I switch to
> debug logging 2 I see in the log when I run the sample thru.
>
> [2006-08-26 18:16:40] Debug mode: Analyzing file with content-type
> "image/png"
> [2006-08
What am I missing? I updated but not png isn't working. If I switch to
debug logging 2 I see in the log when I run the sample thru.
[2006-08-26 18:16:40] Debug mode: Analyzing file with content-type
"image/png"
[2006-08-26 18:16:40] Debug mode: Image type not recognized, unknown
format. Skippin
On Saturday 26 August 2006 06:54, Yves Goergen wrote:
> > I've never seen an animated gif spam, but I suspect the creator of such
> > is a member of this mailing list, because this stuff is appearing almost
> > in parallel with the new plugins.
>
> Shall I send you an example?
No thanks. My point
>> two bits of sa related code i've written, neither of them are what
>> i'd particularly call "polished", but if you feel like firing them
>> up, i'd love to hear your feedback:
>>
>> Phisher:
>> http://www.faisal.com/software/phisher/
>> This is a plugin that does nothing more complicated
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello,
I was just informed that the latest FuzzyOcr version, 3.2b, includes a
function (module from SA) which is only available in 3.1.4, not in
3.1.0. The missing module is Mail::SpamAssassin::Timeout. Currently,
the only way to fix this is to upgrad
Gary V wrote:
> As far as SpamAssassin goes, I don't believe there is a significant
> difference in what a .deb package provides and what installing from source
> provides (which is essentially what CPAN does, bringing dependencies with
> it). I think you would find the program files and rules w
On 26.08.2006 10:18 CE(S)T, John Andersen wrote:
> On Saturday 26 August 2006 00:12, Yves Goergen wrote:
>> Hello,
>>
>> does anybody know when there'll be an update to the ImageInfo plug-in so
>> that it can detect that new animated images stuff? I keep getting more
>> of them and none is detected
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Plenz wrote:
> Today I got animated spam. The first frame only with dots an lines, the
> second frame with spam text, the third frame again with dots and lines. The
> duration of the text frame is very long, the others are very short.
>
> Is there a co
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Gary V wrote:
>> Hello,
>>
>>
>> I just uploaded FuzzyOcr 2.3b to the download site. If you find
>> bugs or run into problems, please mail back :)
>
> The jpeg.eml and png.eml samples failed to provide FuzzyOcr hits on
> my system because the messages
I really must read older emails to the list first...
The current download has been fixed..
Sorry for the noise.
Phil
-Original Message-
From: Randal, Phil
Sent: Saturday, August 26, 2006 10:32 AM
To: 'Plenz'; users@spamassassin.apache.org
Subject: RE: Animated images in mails
FuzzyOCR
FuzzyOCR (http://wiki.apache.org/spamassassin/FuzzyOcrPlugin) will do
what you want.
There's a small error in 2.3b's FuzzyOCR.pm which means it doesn't
recognize jpeg images. To fix that, change
elsif ( substr($picture_data,0,5) eq "\x89\x50\x4e\x47" ) {
to read
elsif ( substr($picture_da
On Saturday 26 August 2006 00:12, Yves Goergen wrote:
> Hello,
>
> does anybody know when there'll be an update to the ImageInfo plug-in so
> that it can detect that new animated images stuff? I keep getting more
> of them and none is detected, whereas they have been detected formerly.
Really? Ani
Hello,
does anybody know when there'll be an update to the ImageInfo plug-in so
that it can detect that new animated images stuff? I keep getting more
of them and none is detected, whereas they have been detected formerly.
--
Yves Goergen "LonelyPixel" <[EMAIL PROTECTED]>
http://beta.unclassifie
28 matches
Mail list logo
