Thanks, both of you. Looks like an update to pdfinfo snuck out while I wasn't looking. I've made the adjustments.
Mike- On Thu, 2 Aug 2007 10:39:20 +0200, you wrote: >"Michael W Cocke" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] >> These blasted PDF spams are driving me mad! Any ideas for a rule that >> would trip if there's no text in the body, just a PDF attachment ? >> >> (I'm using the PDFinfo plugin now, but I don't really understand it) >> >> Thanks! >> >> Mike- >> -- >> If you're not confused, you're not trying hard enough. >> -- >> Please note - Due to the intense volume of spam, we have installed >> site-wide spam filters at catherders.com. If email from you bounces, >> try non-HTML, non-encoded, non-attachments, >> > > >If you're using the PDFinfo plugin, you should see a rule called >GMD_PDF_EMPTY_BODY on those spams - it should fire on any message >containing a PDF and a blank body. Obviously you can modify that rule's score >if you want to make it higher, or meta it with other >rules. Also make sure you're using the latest version of the plugin and the >associated .cf file from >www.rulesemporium.com/plugins.htm. > >Cheers, >Jeremy > > -- If you're not confused, you're not trying hard enough. -- Please note - Due to the intense volume of spam, we have installed site-wide spam filters at catherders.com. If email from you bounces, try non-HTML, non-encoded, non-attachments,
