Re: [PLUG] Graphic spam

[TuskenTower <tuskentower@gmail.com>]

On 8/4/06, Art Alexion <art.alexion@verizon.net> wrote:
> I have been getting a lot of spam lately that is very clever at evading
> filters.  The message text is random, so spamassassin and bogofilter can't
> see a pattern.  The actual spam solicitation is contained in a floating
> graphic -- touting the same stock, but binarily (?) different.
>
> I figured the best way to filter it is to find out what is common and create a
> manual filter to catch it.
>
> diff came to mind as to how to find differences in the messages, but is there
> a corollary command for detecting common lines?

Art,
 Check out this Mac Mail.app specific article
http://www.hawkwings.net/2006/08/01/mailapp-rule-fix-for-image-spam .
The key part is that most of these graphic spam emails contain a
"Content-Type" header with a vlaue of "multipart/related".

HTH
Amul
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug