Just FYI increasing SARE_GIX_STOX has removed this spam from my mailbox. It's doing something right. (I was getting 1-2 an hour prior to increasing that rule's score)

Chris Santerre wrote:
Exactly... and that SARE ruleset is coming very soon :)

--Chris

 > -----Original Message-----
 > From: Jo Rhett [mailto:[EMAIL PROTECTED]
 > Sent: Tuesday, October 17, 2006 1:28 PM
 > To: Kelson
 > Cc: users@spamassassin.apache.org
 > Subject: Re: This image is turning frequent..
 >
 >
 > I think you guys are going down a much harder road.  This only makes
 > sense if and when e-mail with only a GIF is a normal type of
 > e-mail that
 > people find acceptable.  Otherwise, just score e-mail with only a GIF
 > and/or some extra bayes poison high and don't bother analyzing it.
 >
 > Kelson wrote:
 > > decoder wrote:
 > >> But that is a difficult task considering how many things
 > are possible
 > >> with the GIF standard. This picture uses offsets and slow
 > frame rates,
 > >> others use transparency etc. A simple way to block these
 > images would
 > >> be to scan the GIF for offset frames. I don't think there
 > is any valid
 > >> GIF which makes use of these techniques...
 > >
 > > If "offset frames" means what I think it does, they're
 > actually a fairly
 > > common technique in animated GIFs where you only need to
 > change part of
 > > the image.  After all, if you're changing a 30x50 section
 > of a 200x200
 > > image, why waste space on an extra 38,500 pixels?
 > >
 >
 >
 > --
 > Jo Rhett
 > Network/Software Engineer
 > Net Consonance
 >



--
Jo Rhett
Network/Software Engineer
Net Consonance

Reply via email to