"Michael W Cocke" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > These blasted PDF spams are driving me mad! Any ideas for a rule that > would trip if there's no text in the body, just a PDF attachment ? > > (I'm using the PDFinfo plugin now, but I don't really understand it) > > Thanks! > > Mike- > -- > If you're not confused, you're not trying hard enough. > -- > Please note - Due to the intense volume of spam, we have installed > site-wide spam filters at catherders.com. If email from you bounces, > try non-HTML, non-encoded, non-attachments, >
If you're using the PDFinfo plugin, you should see a rule called GMD_PDF_EMPTY_BODY on those spams - it should fire on any message containing a PDF and a blank body. Obviously you can modify that rule's score if you want to make it higher, or meta it with other rules. Also make sure you're using the latest version of the plugin and the associated .cf file from www.rulesemporium.com/plugins.htm. Cheers, Jeremy
