LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 07-25-2007, 10:24 AM   #1
matt1982
Member
 
Registered: Nov 2004
Location: ontario, canada
Distribution: debian
Posts: 52

Rep: Reputation: 15
Exclamation Spamassassin Blank body & PDF attachments


Hi guys,

I've been adding rules to my local.cf file, which obviously I maintain, but recently I've been getting a large amount of SPAM comming in with .pdf attachments and blank lines in the body.

I'm digging hard on google and i'm trying to come up with a rule that if an email comes in with a pdf attachment and a blank body to mark it as SPAM....



Anyone have any ideas, i'm really getting frustrated... :P

Thanks ahead for the help

Matt
 
Old 07-25-2007, 01:54 PM   #2
bigrigdriver
LQ Addict
 
Registered: Jul 2002
Location: East Centra Illinois, USA
Distribution: Debian Squeeze
Posts: 5,771

Rep: Reputation: 308Reputation: 308Reputation: 308Reputation: 308
Try the SpamAssassin Wiki. They have some custom rulesets that you can download, use, and modify to your hearts content.

Get them here: http://wiki.apache.org/spamassassin/ThirdPartySoftware
 
Old 07-25-2007, 02:41 PM   #3
matt1982
Member
 
Registered: Nov 2004
Location: ontario, canada
Distribution: debian
Posts: 52

Original Poster
Rep: Reputation: 15
Question

Thanks, I've been checking out that site today, but the only thing I have found for scanning pdf attachments is by installing a plugin on my spamassassin and then use rules to work with it.

Is there now was to have a rule check an attachment, ie a pdf with blank body?



Still searching...., thanks though for the link
 
Old 07-26-2007, 09:58 AM   #4
matt1982
Member
 
Registered: Nov 2004
Location: ontario, canada
Distribution: debian
Posts: 52

Original Poster
Rep: Reputation: 15
Question

How about just a rule that checks for blank body, how would I do this?... I know how to have it check for words, sentences, but empty body... ??

hmm... THANKS
 
Old 07-27-2007, 09:55 AM   #5
Wells
Member
 
Registered: Nov 2004
Location: Florida, USA
Distribution: Debian, Redhat
Posts: 383

Rep: Reputation: 31
Hrm... looking at the raw source for one of these, you have two different sections:

Quote:
Content-Type: text/plain; charset=windows-1250; format=flowed
Content-Transfer-Encoding: 7bit



--------------060802040601060307000504
And...

Quote:
Content-Type: application/pdf;
After the pdf content type is defined you get your standard mime-encoded PDF file. Now, it seems to me that you can scan for a message that has both a PDF and a text section, and if the text section happens to hold nothing but carriage returns, you can flag that one as spam.
 
  


Reply

Tags
attachment, email, pdf, spamassassin


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Print PDF - blank page Trio3b Linux - General 1 12-10-2005 01:00 AM
firefox & jpeg attachments mikemrh9 Linux - Software 0 02-09-2005 11:12 AM
Blank emails with no headers??!!!!! (postfix/spamassassin/procmail) birkinshawc Linux - Software 0 03-10-2004 08:59 AM
Sendmail & How to reject mail with executable attachments WorldBuilder Linux - Networking 3 02-04-2004 03:27 PM
Procmail & mail attachments PcHammer Linux - Software 1 02-05-2003 08:31 AM


All times are GMT -5. The time now is 01:53 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration