TuskenTower on 4 Aug 2006 19:48:24 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Graphic spam


On 8/4/06, Art Alexion <art.alexion@verizon.net> wrote:
I have been getting a lot of spam lately that is very clever at evading
filters.  The message text is random, so spamassassin and bogofilter can't
see a pattern.  The actual spam solicitation is contained in a floating
graphic -- touting the same stock, but binarily (?) different.

I figured the best way to filter it is to find out what is common and create a
manual filter to catch it.

diff came to mind as to how to find differences in the messages, but is there
a corollary command for detecting common lines?


Art, Check out this Mac Mail.app specific article http://www.hawkwings.net/2006/08/01/mailapp-rule-fix-for-image-spam . The key part is that most of these graphic spam emails contain a "Content-Type" header with a vlaue of "multipart/related".

HTH
Amul
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug