* Please keep replies on-list.

> >>Anyone have any good tricks for catching this damn image spam that they 
> >>want to share?
> >http://wiki.apache.org/spamassassin/FuzzyOcrPlugin
> if you want a less cpu intensive method, try rejecting any email with a
> gif attachment comming from a non-whitelisted host/sender on a dsl
> zone. For me, those mime acl also work even for whitelisted hosts:

Dropping every .gif is not an option for me. Nor is whitelisting hosts,
there's just too many. That's why FuzzyOcrPlugin for SA is quite okay
for me ;)   It catches an amazing amount of 'picture spam'!

>   deny   condition      = ${if eq{${lc:$mime_content_type}}\
>                           {text/html}}
>          mime_regex     = \</HEAD>[\\n\\r]+<BODY bgColor=#ffffff>[\\n\\r]+\
>                           <DIV( align=center)>(<FONT face=Arial size=2>)\
>                           <IMG alt="" \
>                           hspace=0[\\s\\n\\r]+src="cid\:[0-9a-f]{12}.+\
> 
> [EMAIL PROTECTED]"[\\s\\n\\r]align=\
>                           baseline[\\s\\n\\r]+border=0>
>          message        = SPAM not welcome
> 
>   deny   condition      = ${if match {${lc:$mime_filename}}{\N[.]gif$\N}}
>          !condition     = ${if eq {$mime_content_id}{}}
>          condition      = ${if eq {$mime_part_count}{4}}
>          spf            = neutral:none:invalid:softfail
>          acl            = dialup_acl
>          message        = SPAM not welcome
> 
>   deny   condition      = ${if match {${lc:$mime_filename}}{\N[.]gif$\N}}
>          condition      = ${if eq {$mime_part_count}{2}}
>          condition      = ${if eq {$mime_content_size}{9}}
>          spf            = neutral:none:invalid:softfail
>          acl            = dialup_acl
>          message        = SPAM not welcome

-- 
| If you're too open-minded, your brain will fall out.
| 1024D/08CEC94D - 34B3 3314 B146 E13C 70C8  9BDB D463 7E41 08CE C94D

-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to