<HTML><HEAD><TITLE>email signature</TITLE>
<META http-equiv=Content-Type content="text/html; charset=ISO-8859-15">
<META content="MSHTML 6.00.2900.3527" name=GENERATOR></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Segoe UI" text=#000000 bgColor=#ffffff>
<DIV>I have seen this too. I ran across several sites that pointed me to some software that has solved this problem. I looked at this first:</DIV>
<DIV> </DIV>
<DIV><A href="http://www.nabble.com/GIF-Spam----Setting-up-the-%27OCR-scanner-and-image-validator-SA-plugin%27-to5622534.html">http://www.nabble.com/GIF-Spam----Setting-up-the-%27OCR-scanner-and-image-validator-SA-plugin%27-to5622534.html</A></DIV>
<DIV> </DIV>
<DIV>But this is the one that I adapted from MaiaMailGuard to MailScanner.</DIV>
<DIV> </DIV>
<DIV><A href="http://www.maiamailguard.com/files/SLES10_MaiaMailGuard_Gateway_102.pdf">http://www.maiamailguard.com/files/SLES10_MaiaMailGuard_Gateway_102.pdf</A></DIV>
<DIV> </DIV>
<DIV>Basically, I installed </DIV>
<DIV> </DIV>
<DIV>-rw-r--r-- 1 root root 124418 Jan 7 2007 fuzzyocr-3.5.1-devel.tar.gz<BR>-rw-r--r-- 1 root root 248889 Apr 4 01:15 gifsicle-1.55.tar.gz<BR>-rw-r--r-- 1 root root 700288 Oct 22 2008 gocr-0.46.tar.gz<BR>-rw-r--r-- 1 root root 363267 Mar 29 16:54 gocr-0.47.tar.gz<BR>-rw-r--r-- 1 root root 95139 May 5 16:06 ocrad-0.18-rc1.tar.gz<BR>-rw-r--r-- 1 root root 37544 May 5 16:26 sample-mails.tar.gz</DIV>
<DIV> </DIV>
<DIV>and I needed to install: giflib-progs-4.1.4-14.2 needed by gif conversion programs and I needed to install several perl modules.</DIV>
<DIV> </DIV>
<DIV>BTW, gocr-0.47 has a build problem with linker flags not being specified but I was able to work around it eventually.</DIV>
<DIV> </DIV>
<DIV>I only implemented it earlier last week, and so far stopped 502 e-mails with image based spam:</DIV>
<DIV> </DIV>
<DIV><TD>FUZZY_OCR</TD> <TD>Mail contains an image with common spam text inside</TD> <TD align="right">502</TD> <TD align="right">0</TD> <TD align="right">0</TD> <TD align="right">502</TD> <TD align="right">100</TD></DIV>
<DIV> </DIV>
<DIV>Gary Faith<BR><BR>>>> Alessandro Bianchi <alex@skynet-srl.com> 5/10/2009 12:37 PM >>><BR>In the last days I'm getting a lot of image only spam.<BR><BR>It contains no links and no text at all<BR><BR>The size of the image is different every time, and it advertizes pharmacy inviting users to visit funny sites with always different names like <A class=moz-txt-link-abbreviated href="http://www.8654.org">www.8654.org</A> and similar.<BR><BR>I've palayed around spamassassin rules with some luck (somettimes I catch sometimes I don't).<BR><BR>Has anyone else seen something similar?<BR><BR>Any ideas about how to stop it?<BR><BR>Best regards and thanks<BR><BR>Alessandro Bianchi<BR><BR></DIV>
<DIV class=moz-signature>-- <BR>
<META http-equiv=Content-Style-Type content=text/css>
<STYLE type=text/css>
p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; text-align: center; font: 13.0px Arial; color: #1341f9}
p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; text-align: center; font: 11.0px Arial; color: #ff5f0d}
p.p3 {margin: 0.0px 0.0px 0.0px 0.0px; text-align: center; font: 11.0px Arial; color: #0013f9}
p.p4 {margin: 0.0px 0.0px 0.0px 0.0px; text-align: center; font: 11.0px Arial; color: #1d24f9}
p.p5 {margin: 0.0px 0.0px 0.0px 0.0px; text-align: center; font: 11.0px Arial; color: #1d24f9; min-height: 12.0px}
p.p6 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 13.0px}
p.p7 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #566880}
span.s1 {text-decoration: underline ; color: #0010e8}
span.s2 {text-decoration: underline ; color: #000beb}
</STYLE>
<P class=p1><B>SkyNet SRL</B></P>
<P class=p2>P.zza XXV Aprile 14 - 28021 Borgomanero (NO) - ITALY</P>
<P class=p3>Tel. +39 0322 836487/834765 - Fax.+39 0322.836608</P>
<P class=p4><A class=moz-txt-link-abbreviated href="mailto:info@skynet-srl.com">info@skynet-srl.com</A> -<A href="http://www.skynet-srl.com"><SPAN class=s1>www.skynet-srl.com</SPAN></A></P>
<P class=p5><BR></P>
<P class=p6><BR></P>
<P class=p6><BR></P>
<P class=p7>Le informazioni contenute in questo messaggio sono riservate e confidenziali e ne é vietata la diffusione in qualunque forma.</P>
<P class=p7>Qualora Lei non fosse la persona a cui il presente messaggio é destinato, La invitiamo ad eliminarlo dandocene gentilmente comunicazione.</P>
<P class=p7>Per qualsiasi informazione in merito si prega di contattare <A href="mailto:info@skynet-srl.com"><SPAN class=s2>info@skynet-srl.com</SPAN></A>. ( Rif. D.L. 196/200 )</P><BR></DIV></BODY></HTML>