* Please keep replies on-list. > >>Anyone have any good tricks for catching this damn image spam that they > >>want to share? > >http://wiki.apache.org/spamassassin/FuzzyOcrPlugin > if you want a less cpu intensive method, try rejecting any email with a > gif attachment comming from a non-whitelisted host/sender on a dsl > zone. For me, those mime acl also work even for whitelisted hosts:
Dropping every .gif is not an option for me. Nor is whitelisting hosts, there's just too many. That's why FuzzyOcrPlugin for SA is quite okay for me ;) It catches an amazing amount of 'picture spam'! > deny condition = ${if eq{${lc:$mime_content_type}}\ > {text/html}} > mime_regex = \</HEAD>[\\n\\r]+<BODY bgColor=#ffffff>[\\n\\r]+\ > <DIV( align=center)>(<FONT face=Arial size=2>)\ > <IMG alt="" \ > hspace=0[\\s\\n\\r]+src="cid\:[0-9a-f]{12}.+\ > > [EMAIL PROTECTED]"[\\s\\n\\r]align=\ > baseline[\\s\\n\\r]+border=0> > message = SPAM not welcome > > deny condition = ${if match {${lc:$mime_filename}}{\N[.]gif$\N}} > !condition = ${if eq {$mime_content_id}{}} > condition = ${if eq {$mime_part_count}{4}} > spf = neutral:none:invalid:softfail > acl = dialup_acl > message = SPAM not welcome > > deny condition = ${if match {${lc:$mime_filename}}{\N[.]gif$\N}} > condition = ${if eq {$mime_part_count}{2}} > condition = ${if eq {$mime_content_size}{9}} > spf = neutral:none:invalid:softfail > acl = dialup_acl > message = SPAM not welcome -- | If you're too open-minded, your brain will fall out. | 1024D/08CEC94D - 34B3 3314 B146 E13C 70C8 9BDB D463 7E41 08CE C94D -- ## List details at http://www.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://www.exim.org/eximwiki/