How to discard emails with info in X-Mailer and X-FID

[Randal, Phil]

Yes, 

Just create header rules in spamassassin to score them.

Today we've processed 2569 emails with X-FID: headers, all but 6 of
which were tagged as spam without any new rules required.

The new spams are intriguing - they have three images, the first a .jpg
of a pen knib, the second a stock pump/dump scam gif, and the third a
"free emoticons for your email" gif.  The equivalent of attempted Bayes
Poisoning for OCR scanners?

I am sorely tempted to add "free emoticons" to my FuzzyOCR wordlist.

Cheers,

Phil

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of David
Jourard
Sent: Monday, January 15, 2007 8:40 PM
To: MailScanner discussion
Subject: How to discard emails with info in X-Mailer and X-FID

Hi,

Today a new spam variant appeared and was getting thru my commercial 
spam service.

They  indicated that if I could block the variant till they fix it it 
would be good.

They gave the values for the  X-Mailer and X-FID.

Is it possible to discard the emails with these parameters via
MailScanner.

Thanks
David J.
-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!