R: Fake User-Agent on PDF

Denis Beauchemin Denis.Beauchemin at USherbrooke.ca
Tue Jul 17 16:26:39 IST 2007


Dalimil Gala a écrit :
>
> Hi,
>
> the PDFInfo plugin is available to public since yesterday
> http://www.rulesemporium.com/plugins.htm#pdfinfo
>
> I have installed it on two of my mail hubs, both are working well so far
>
> Jul 17 13:21:34 antigona MailScanner[20197]: Message l6HBLJbk021114 
> from 70.166.145.4 (noi at ucla.edu) to xxxxx.ch is spam, SpamAssassin 
> (score=20.74, required 5, autolearn=disabled, BAYES_95 4.60, 
> GMD_PDF_ENCRYPTED 0.60, GMD_PDF_FUZZY2_T6 1.99, GMD_PDF_HORIZ 0.90, 
> GMD_PDF_STOX_M1 3.25, GMD_PDF_STOX_M3 2.25, GMD_PDF_STOX_M4 2.95, 
> HELO_DYNAMIC_IPADDR 4.20, INVALID_MSGID 0.00)
>
>
> Dalimil Gala
>  
I just downloaded and installed it and "spamassassin --lint" returns an 
error because pdfinfo.cf is in error (the last test name is spelled 
incorrectly):
meta        __GMD_PDF_CHECKSUM  ( GMD_PDF_FUZZY1_T1 || GMD_PDF_FUZZY2_T1 
|| GMD_PDF_FUZZY2_T2 || GMD_PDF_FUZZY2_T3 || GMD_PDF_FUZZY2_T4 || 
GMD_PDF_FUZZY2_T5 || GMD_PDF_FUZZY2_T6 || GMD_PDF_FUZZY_7 )
should read:
meta        __GMD_PDF_CHECKSUM  ( GMD_PDF_FUZZY1_T1 || GMD_PDF_FUZZY2_T1 
|| GMD_PDF_FUZZY2_T2 || GMD_PDF_FUZZY2_T3 || GMD_PDF_FUZZY2_T4 || 
GMD_PDF_FUZZY2_T5 || GMD_PDF_FUZZY2_T6 || GMD_PDF_FUZZY2_T7 )

Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x62252 F: 819.821.8045




More information about the MailScanner mailing list