Re: any way to stop these tiny zip spams?

2008-03-24 Thread Benny Pedersen
On Tue, March 18, 2008 22:36, Jason Haar wrote: > ...we're getting around 15,000 per day at the moment: emails containing > one line of text and a <1Kbyte zip attachment (filename varies) - which > contains a spammy HTML file. yes to late to stop the spam, but sender ip is listed in spamhaus, and

any way to stop these tiny zip spams?

2008-03-18 Thread Jason Haar
...we're getting around 15,000 per day at the moment: emails containing one line of text and a <1Kbyte zip attachment (filename varies) - which contains a spammy HTML file. http://pastebin.com/m493f478c I don't expect it'll last long as a delivery system, but currently only RBL rules have any

Re: zip spams

2007-12-06 Thread Theo Van Dinter
On Sat, Dec 01, 2007 at 10:30:11PM +0800, [EMAIL PROTECTED] wrote: > Many spam messages with a .zip attachment in them. > How do you stop it in SA rules? Block mails w/ zip attachments at your MTA. Otherwise you could write a mimeheader rule to look for those filenames. pgp39d1lYLKqm.pgp Descri

zip spams

2007-12-01 Thread ringlink
Many spam messages with a .zip attachment in them. How do you stop it in SA rules? thanks. --- 注册51job,轻松搞定好工作!( http://d1.sina.com.cn/sina/limeng3/mail_zhuiyu/2007/mail_zhuiyu_20071126.html ) ===

RE: zip spams

2007-08-03 Thread Suhas Ingale
How about creating a rule wherein if the email contains attachment and the body is blank. I need some help I creating this rule. -Original Message- From: wolfgang [mailto:[EMAIL PROTECTED] Sent: Friday, August 03, 2007 12:09 PM To: users@spamassassin.apache.org Subject: Re: zip spams In

Re: zip spams

2007-08-02 Thread wolfgang
In an older episode (Friday, 3. August 2007 01:46), Theo Van Dinter wrote: > BTW: full rules are horrible. You want mimeheader (and the > MIMEheader plugin), part of the standard distribution. Thanks for the info! wolfgang

Re: zip spams

2007-08-02 Thread Theo Van Dinter
On Fri, Aug 03, 2007 at 12:37:45AM +0200, wolfgang wrote: > > > like to know how can I write a spamassassin rule to assign a score > > > to just having a zip attachment. > > > > fullLOCAL_ZIP_ATT m/Content-(?:Disposition|Type).{1,40} > > (name=\"?.{1,50}\.)?zip\"?/is BTW: full rules ar

Re: zip spams

2007-08-02 Thread wolfgang
In an older episode (Thursday, 2. August 2007 08:22), wolfgang wrote: > > I would > > like to know how can I write a spamassassin rule to assign a score > > to just having a zip attachment. > > Try something like > > fullLOCAL_ZIP_ATT m/Content-(?:Disposition|Type).{1,40} > (name=\"?.{1

Re: zip spams

2007-08-01 Thread wolfgang
In an older episode (Wednesday, 1. August 2007 16:41), Igor Chudov wrote: > I would > like to know how can I write a spamassassin rule to assign a score to > just having a zip attachment. Try something like fullLOCAL_ZIP_ATT m/Content-(?:Disposition|Type).{1,40} (name=\"?.{1,50}\.)

zip spams

2007-08-01 Thread Igor Chudov
I am getting stock spams in zip files. They are a variation of stock spams, are there any rules for them that I need to know about? Some time ago, I used to junk all zip files from procmail. I would like to know how can I write a spamassassin rule to assign a score to just having a zip attachmen