On Tue, 2 Jun 2009, Jean-Paul Natola wrote:

Correction they are  rtf  not doc

ftp://ftp.fcimail.org/IT/SA_Sample/shambling.rtf

Sorry, I meant a sample of the raw message, so that we can inspect the headers and such.

-----Original Message-----
From: John Hardin [mailto:jhar...@impsec.org]
Sent: Tuesday, June 02, 2009 9:47 AM
To: Jean-Paul Natola
Cc: users@spamassassin.apache.org
Subject: Re: word doc spam

On Tue, 2 Jun 2009, Jean-Paul Natola wrote:

Is there a rule to catch these messages with no body and a 550 bite word
attachment?

Can you post a sample somewhere for us?

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  It is not the place of government to make right every tragedy and
  woe that befalls every resident of the nation.
-----------------------------------------------------------------------
 4 days until the 65th anniversary of D-Day

Reply via email to