Spam with the bodytext in a image

[Adri Koppes]

Tobias,
 
The Sare stock rules set has some specific rules for detecting inline
gif images.
See http://www.rulesemporium.com.
Also if you use sa-update, it includes some new rules for this in
80_additional.cf.
 
Adri.


________________________________

	From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Tobias
Axelsson
	Sent: woensdag 10 mei 2006 16:50
	To: MailScanner discussion
	Subject: Spam with the bodytext in a image
	
	
	 
	 
	Hi
	 
	We have some problem with spam that sends a mail only containing
a gif-image with the text in.
	
	Offcourse they change the filename everytime.
	 
	I'm not sure if it's ok to attach files to this list, so I don't
:)
	 
	One solution could be a md5sum-blacklist on attachment, becourse
the md5sum does'nt change if you change the filename...
	 
	Is there current a function that I can use for this or is this
maybe a future reliase feature to add?
	 
	Thanks for a great bundled software
	 
	/Tobias
	Vaxjo university

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060510/8821acc3/attachment.html