Stephane Bentebba wrote:
hi all,
i am more or less happy with my spamassassin configuration
works good for one year
but i have problem with a new kind of spam which easylly go throught it :
spam which has poor text, poor token, or none, and a subject always
changing
the only thing which remain the same is the image incoporated in it
it get always very low hit (bellow 3)
subject on the image in the body is either "breaking news concerning..."
or "we have a runner !"
would it be possible to find a solution ?
add / modify a test to look at first bytes of an attachement and
recognize the image ?
i can send you samples of this spam if you like... (prefer not to attach
them)
Have a look at FuzzyOCR
http://wiki.apache.org/spamassassin/FuzzyOcrPlugin
Works very well for me - I'm using it in conjuction with ImageInfo and
since I'm using them those image spams get through VERY rarely
They will also block off legit emails too
