Re: Gif Spam

san wrote: > Hi, > > Is there any rule to stop mails which has .Gif attachment in SA 2.64. > Generally speaking, not much. If anything, you can try the SARE stocks ruleset, but I'm not sure if that ruleset supports such an old version of spamassassin. http://www.rulesemporium.com/rules/70_sar

Re: Gif Spam

Am Donnerstag, 21. Dezember 2006 19:28 schrieb san: > Hi, > > Is there any rule to stop mails which has .Gif attachment in SA 2.64. Yes, upgrade to 3.1.7. bye, MH -- Die unaufgeforderte Zusendung einer Werbemail an Privatleute verstößt gegen §1 UWG und 823 I BGB (Beschluß des LG Berlin

Gif Spam

Hi, Is there any rule to stop mails which has .Gif attachment in SA 2.64. -- View this message in context: http://www.nabble.com/Gif-Spam-tf2866950.html#a8012562 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

interlaced GIF spam (sample)

Finally got my first interlaced GIF spam! Here's the raw message: http://Puffin.net/software/spam/samples/0003_interlaced.eml and a page containing each frame extracted into its own separate GIF, followed by the "whole" raw GIF: http://Puffin.net/softwa

Re: Infuriating gif spam...

Bill Landry wrote: >> Version 2.3j works much better... I'd previously been using version >> 2.3b for which I had an ebuild for gentoo. >> >> One thing I have noticed, however, is a number of errors/warnings which >> spamd sticks into /var/log/messages when it is started: >> >> -- >> Sep 26 17:20

Re: Infuriating gif spam...

- Original Message - From: "Steve [Spamassasin]" <[EMAIL PROTECTED]> Jorge Valdes wrote: There are multiple images in these gifs, and because the first image is 'junk', sending this image through gocr will yield no results. The problem is that you have to scan all images to find the te

Re: Infuriating gif spam...

Jorge Valdes wrote: > There are multiple images in these gifs, and because the first image > is 'junk', sending this image through gocr will yield no results. The > problem is that you have to scan all images to find the text. Try > this with each image: > > convert -append News.gif pnm:- | gocr

Re: Infuriating gif spam...

Steve [Spamassasin] wrote: I've been getting a _lot_ of spam recently which has been defeating my spamassassin configuration - all of it has the same general form... A message with auto-generated prose and an image. I installed FuzzyOCR and this helped, but one particular variant still slips thr

Infuriating gif spam...

I've been getting a _lot_ of spam recently which has been defeating my spamassassin configuration - all of it has the same general form... A message with auto-generated prose and an image. I installed FuzzyOCR and this helped, but one particular variant still slips through. The problematic spams

Re: animated GIF spam

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kenneth Porter wrote: > --On Tuesday, August 22, 2006 1:07 AM -0500 "Chip M." > <[EMAIL PROTECTED]> wrote: > >>> For interlaced ... I have no idea. Depends a lot on how the >>> interlaced images are stored, I guess. >> >> Yes, exactly. Until there's

Re: animated GIF spam

--On Tuesday, August 22, 2006 1:07 AM -0500 "Chip M." <[EMAIL PROTECTED]> wrote: For interlaced ... I have no idea. Depends a lot on how the interlaced images are stored, I guess. Yes, exactly. Until there's samples, I'm not going to worry about it. There's also progressive JPEG.

Re: animated GIF spam

On Mon, 21 Aug 2006, John Rudd wrote: On Aug 21, 2006, at 10:13 PM, Chip M. wrote: While skimming thru my daily rejected spam pile, did a double take when a GIF spam seemed to "blink" at me. Thought it was a sw glitch at first... then realized the sneaky Borg had adapted again. T

Re: animated GIF spam

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Rudd wrote: > > On Aug 21, 2006, at 10:13 PM, Chip M. wrote: > >> While skimming thru my daily rejected spam pile, did a double take >> when a >> GIF spam seemed to "blink" at me. Thought it was a sw glitc

Re: animated GIF spam

At 10:26 PM 8/21/2006 -0700, John Rudd wrote: >I also heard that interlaced gif spam is appearing now. Yes, I saw that post, however there wasn't a publicly available sample. Any such would be much appreciated. >It'd be interesting to see how to counter them. Should be easy.

Re: animated GIF spam

While skimming thru my daily rejected spam pile, did a double take when a GIF spam seemed to "blink" at me. Thought it was a sw glitch at first... then realized the sneaky Borg had adapted again. Took a look at the frames in PaintShopPro's AnimationShop, and the first three ar

Re: animated GIF spam

On Aug 21, 2006, at 10:13 PM, Chip M. wrote: While skimming thru my daily rejected spam pile, did a double take when a GIF spam seemed to "blink" at me. Thought it was a sw glitch at first... then realized the sneaky Borg had adapted again. Took a look at the frames in Pain

animated GIF spam

While skimming thru my daily rejected spam pile, did a double take when a GIF spam seemed to "blink" at me. Thought it was a sw glitch at first... then realized the sneaky Borg had adapted again. Took a look at the frames in PaintShopPro's AnimationShop, and the first three ar

RE: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

Jeff Moss Cc: users@spamassassin.apache.org Subject: Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin' Jeff- Make sure you apply the patches to both the gocr source and Image::ExifTool. The gocr patch deals specifically with the segfault issues. From the

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

Jeff- You might also want to see if you copy the message out of a client application like Thunderbird and then copy the image to your server and running giftopnm on it. It might be that uudeview is the problem and not giftopnm. The errors sounds like a corrupt gif image. This should not ef

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

Jeff- Make sure you apply the patches to both the gocr source and Image::ExifTool. The gocr patch deals specifically with the segfault issues. From the docs: # - Perl module Image::ExifTool and a patch for GIF pics: # http://antispam.imp.ch/patches/patch-GIF-Colortable # # - Gocr from ht

RE: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

AIL PROTECTED] Sent: Thursday, August 03, 2006 10:41 AM To: users@spamassassin.apache.org Subject: Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin' Davin Flatten wrote: > Just thought this might help someone out. Thanks to M. Blapp for an > excellent

RE: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

#x27;m still trying to figure out what's causing it. > > Jeff Moss > > -Original Message- > From: Stuart Johnston [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 03, 2006 10:41 AM > To: users@spamassassin.apache.org > Subject: Re: GIF Spam -- Setting up the 

RE: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

ROTECTED] Sent: Thursday, August 03, 2006 10:41 AM To: users@spamassassin.apache.org Subject: Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin' Davin Flatten wrote: > Just thought this might help someone out. Thanks to M. Blapp for an > excellen

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

Stuart- Not significant that I have noticed. We are running a dedicated spamassassin gateway however. It's only job is to process spam. It is running dual Xeon 2.80GHz/2MB cache with 4GB of RAM over RAID5 with some scratch partitions loaded in RAM. We also run clamav, mimedefang, bayes out

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

Davin Flatten schreef: Just thought this might help someone out. Thanks to M. Blapp for an excellent SA Plugin. Optical Character Recognition (OCR) can be used to nab those pesky spam messages that are hidden in gif,jpeg, or png images... I ran a search on the patch and I didn't see any refe

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

Theo Van Dinter wrote: > On Thu, Aug 03, 2006 at 02:14:38PM +0200, Matthias Keller wrote: > >> I downloaded the archive for 3.1.0 and there's no Timeout.pm at all - so >> i guess this has been introduced in 3.1.1 or so..? >> > > Correct, it was added into 3.1.1 (bug 4696). > > >> Does an

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

Davin Flatten wrote: Just thought this might help someone out. Thanks to M. Blapp for an excellent SA Plugin. Optical Character Recognition (OCR) can be used to nab those pesky spam messages that are hidden in gif,jpeg, or png images... This OCR stuff looks promising. Any comments on perfor

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

On Thu, Aug 03, 2006 at 07:19:51AM -0400, Davin Flatten wrote: > You could try commenting out the line that loads this module. On you > machine it might be already loaded, but on my installation it does not > get loaded by default. If you have 3.1.1 installed it should be there already. > Noti

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

On Thu, Aug 03, 2006 at 02:14:38PM +0200, Matthias Keller wrote: > I downloaded the archive for 3.1.0 and there's no Timeout.pm at all - so > i guess this has been introduced in 3.1.1 or so..? Correct, it was added into 3.1.1 (bug 4696). > Does anyone know if it's safe to let it away? I haven't

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

I downloaded the archive for 3.1.0 and there's no Timeout.pm at all - so i guess this has been introduced in 3.1.1 or so..? Does anyone know if it's safe to let it away? JM would be the one with the definitive answer. But my recollection is that it is a new/clean implementation of a manager f

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

Davin Flatten wrote: > Matthias- > > Yes I had the same issue on my setup which I forgot to mention. I had > to copy the Timeout.pm module from the SpamAssassin source tree into > the installation path. On my machine it was Hmm I downloaded the archive for 3.1.0 and there's no Timeout.pm at all -

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

Matthias- Yes I had the same issue on my setup which I forgot to mention. I had to copy the Timeout.pm module from the SpamAssassin source tree into the installation path. On my machine it was cp /usr/local/src/Mail-SpamAssassin-3.1.1/lib/Mail/SpamAssassin/Timeout.pm /usr/local/share/perl

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

Davin Flatten wrote: > Just thought this might help someone out. Thanks to M. Blapp for an > excellent SA Plugin. Optical Character Recognition (OCR) can be used > to nab those pesky spam messages that are hidden in gif,jpeg, or png > images... > > Here is what I did to get the plugin running. >

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

results - are very good on my preliminary tests. these two spams look exactly the same in my email program except the subject line here is a spam before ---snip--- From - Wed Aug 02 22:29:15 2006 X-Mozilla-Status: 0001 X-Mozilla-Status2: X-Spam-Checker-Version: SpamAssassin 3.1.1 (2

GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

Just thought this might help someone out. Thanks to M. Blapp for an excellent SA Plugin. Optical Character Recognition (OCR) can be used to nab those pesky spam messages that are hidden in gif,jpeg, or png images... Here is what I did to get the plugin running. Test the components that the p