ytes will have no data we need, so save
>> some cycles
>> - next if ($line =~ /[\x80-\xff]/);
>>
>> Thank you very much for the detailed analysis. I had seen this problem
>> on some PDFs but have not had the time to dive into the issue. You
>> vastly reduced th
the issue. You
> vastly reduced the pain of fixing it.
>
>
> > I'm trying to create a couple rules to identify questionable PDFs
> > (phishing, etc.). While evaluating the debug output from spamassassin
> > for
> > the pdfinfo plugin, I noticed that some of th
seen this problem
on some PDFs but have not had the time to dive into the issue. You
vastly reduced the pain of fixing it.
I'm trying to create a couple rules to identify questionable PDFs
(phishing, etc.). While evaluating the debug output from spamassassin
for
the pdfinfo plugin, I
If this is the wrong forum to report this, let me know.
I'm trying to create a couple rules to identify questionable PDFs
(phishing, etc.). While evaluating the debug output from spamassassin for
the pdfinfo plugin, I noticed that some of the test file attributes aren't
being populated
On 12/02/2014 07:02 PM, John Hardin wrote:
On Tue, 2 Dec 2014, Axb wrote:
On 12/02/2014 11:58 AM, Stefan Jakobs wrote:
Hello,
I still use the pdfinfo plugin from Dallas Engelken (and it still
hits on
some
messages). But does anyone know the status of the plugin? Is it
maintained?
I
On 12/02/2014 07:02 PM, John Hardin wrote:
On Tue, 2 Dec 2014, Axb wrote:
On 12/02/2014 11:58 AM, Stefan Jakobs wrote:
Hello,
I still use the pdfinfo plugin from Dallas Engelken (and it still
hits on
some
messages). But does anyone know the status of the plugin? Is it
maintained?
I
On Tue, 2 Dec 2014, Axb wrote:
On 12/02/2014 11:58 AM, Stefan Jakobs wrote:
Hello,
I still use the pdfinfo plugin from Dallas Engelken (and it still hits on
some
messages). But does anyone know the status of the plugin? Is it
maintained?
I'm partially to blame this plugin e
On 12/02/2014 11:58 AM, Stefan Jakobs wrote:
Hello,
I still use the pdfinfo plugin from Dallas Engelken (and it still hits on some
messages). But does anyone know the status of the plugin? Is it maintained?
I'm partially to blame this plugin exists - rule support, etc.
Does it make
Hello,
I still use the pdfinfo plugin from Dallas Engelken (and it still hits on some
messages). But does anyone know the status of the plugin? Is it maintained?
Does it make sense to use it with spamassassin 3.4.0 or is a similar
functionality already included there?
Best regards
Stefan
On 8/20/07, Robert Fitzpatrick <[EMAIL PROTECTED]> wrote:
> The plugins page at SARE says this is 0.8, but is it? The pm file looks
> fine.
>
> http://www.rulesemporium.com/plugins/pdfinfo.cf
>
You probably want to be looking at:
http://www.rulesemporium.com/plugins/PDFInfo.pm
not the .cf file. I
The plugins page at SARE says this is 0.8, but is it? The pm file looks
fine.
http://www.rulesemporium.com/plugins/pdfinfo.cf
--
Robert
how can I block some prohibitive words on pdf files, like FuzzyOCR do,
for example...
Kai Schaetzl escreveu:
Rejaine Monteiro wrote on Thu, 16 Aug 2007 11:57:00 -0300:
how can I increase the pdfplugin plugin/rules ??
any tips?
Give more details, please.
Kai
Rejaine Monteiro wrote on Thu, 16 Aug 2007 11:57:00 -0300:
> how can I increase the pdfplugin plugin/rules ??
> any tips?
Give more details, please.
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
hi
i'm using pdfinfo plugin/rules, some messages are rejected, but many
spams are passed...
how can I increase the pdfplugin plugin/rules ??
any tips?
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
CharlesLai schrieb:
> Just copy the PDFInfo.pm plugin into the default directory for Spamassassin
> plugins:
>
> sudo cp /downloads/pdfinfo/PDFInfo.pm
> /Library/Perl/5.8.6/Mail/SpamAssassin/Plugin/
Remember that putting your
I installed PDFInfo on our Mac OS X Server, and here’s what worked for me:
Just copy the PDFInfo.pm plugin into the default directory for Spamassassin
plugins:
sudo cp /downloads/pdfinfo/PDFInfo.pm
/Library/Perl/5.8.6/Mail/SpamAssassin/Plugin/
(I had the plugin in the /downloads/pdfinfo
I have placed pdfinfo.cf into /etc/mail/spamassassin
>and
>placed PDFInfo.pm into /etc/mail/spamassassin/Plugin
>I then amended /etc/mail/spamassassin/init.pre with the
following line
>loadplugin Mail::SpamAssassin::Plugin::PDFInfo /etc/mail/
spamassassin/Plugin/PDFInfo.pm
&
into /etc/mail/spamassassin
and
placed PDFInfo.pm into /etc/mail/spamassassin/Plugin
I then amended /etc/mail/spamassassin/init.pre with the following
line
loadplugin Mail::SpamAssassin::Plugin::PDFInfo /etc/mail/spamassassin/
Plugin/PDFInfo.pm
However
PDF spam mail does not seem to be
ound by ClamAV MRSBL signatures
score CLAMAV_MSRBL 2.0
Hope this is of some help to someone...
--
View this message in context:
http://www.nabble.com/My-bash-script-to-upload-PDFinfo-daily%2C-safely-tf4115144.html#a11732078
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
On Fri, 20 Jul 2007, Matthias Keller wrote:
> I'm only using the signatures with the spamassassin plugin because I found
> them to be too invasive. I dont allow anyone to block a mail at SMTP level
> just because it contains ONE sentence. The sanesecurity signatures also
> contain a LOT of single
ils it for
everyone and themselves.
People are still getting PDF spams?
I'm finding with a current version of SA and the sane security clamav
signatures, that none have gotten through for a few days now.
Do we really need a PDFinfo at this point?
Yes. Definitely.
I'm only
eching spoils it for
> everyone and themselves.
People are still getting PDF spams?
I'm finding with a current version of SA and the sane security clamav
signatures, that none have gotten through for a few days now.
Do we really need a PDFinfo at this point?
Andy
---
Andy Dills
Xecunet, Inc.
www.xecu.net
301-682-9972
---
Guys
These are NOT AV signatures to be updated every day/hour, whatever
Hammering the site won't make it any better and not help to keep it going.
Seems some ppl still haven't understood that hammer-leeching spoils it
for everyone and themselves.
echo Downloading, veryfying perl module and size of config file...
>
> if wget -q -O $PM http://www.rulesemporium.com/plugins/PDFInfo.pm
> \
> && wget -q -O $CF http://www.rulesemporium.com/plugins/pdfinfo.cf
> \
> && pe
size of config file...
if wget -q -O $PM http://www.rulesemporium.com/plugins/PDFInfo.pm
\
&& wget -q -O $CF http://www.rulesemporium.com/plugins/pdfinfo.cf
\
&& perl -MMail::SpamAssassin::Plugin::PDFInfo -e print "Perl Module PDFInfo
Hi,
Anyone have any idea of the following error message when using SA 3.1.7
and PDFInfo?
[EMAIL PROTECTED] spamassassin]# spamassassin --lint
[10850] warn: plugin: failed to create instance of plugin
Mail::SpamAssassin::Plugin::PDFinfo: Can't locate object method "new&qu
McDonald, Dan wrote:
On Fri, 2007-07-13 at 12:28 -0400, Robert Fitzpatrick wrote:
Just verified a couple of PDF attachments getting through with our
PDFInfo rules. Can someone test these to see if my PDF rules are working
or if you're able to block? I believe the rules are working a
On Fri, 13 Jul 2007 at 14:36 -0500, [EMAIL PROTECTED] confabulated:
Duane Hill wrote:
On Fri, 13 Jul 2007 at 11:17 +0100, -- confabulated:
How can I get the plugin? I have emailed the webmaster a couple of times
but no response :(
I haven't received a response either.
Duane,
We sent you
ely, and got a response after a few
days.
Well, the subject on your first email was not "PDFInfo Access", so you
get tossed aside and dealt with last ;)
There is more than 1 person answering these requests... so if you dont
have an answer in a day or so, just yell.
Duane Hill wrote:
On Fri, 13 Jul 2007 at 11:17 +0100, -- confabulated:
How can I get the plugin? I have emailed the webmaster a couple of times
but no response :(
I haven't received a response either.
Duane,
We sent you the information on July 3rd, same day you requested it, and
you tem
On Fri, 2007-07-13 at 12:28 -0400, Robert Fitzpatrick wrote:
> Just verified a couple of PDF attachments getting through with our
> PDFInfo rules. Can someone test these to see if my PDF rules are working
> or if you're able to block? I believe the rules are working as the
>
On Fri, Jul 13, 2007 at 12:28:39PM -0400, Robert Fitzpatrick wrote:
> Just verified a couple of PDF attachments getting through with our
> PDFInfo rules. Can someone test these to see if my PDF rules are working
> or if you're able to block?
I don't use PDFInfo, but both of th
Just verified a couple of PDF attachments getting through with our
PDFInfo rules. Can someone test these to see if my PDF rules are working
or if you're able to block? I believe the rules are working as the
latter message is hitting one, just not enough to block. I tried my
access to the PD
At 05:07 AM Friday, 7/13/2007, you wrote -=>
On Fri, 13 Jul 2007 at 11:17 +0100, -- confabulated:
How can I get the plugin? I have emailed the webmaster a couple of times
but no response :(
I haven't received a response either.
FYI, I emailed a second time, nicely, and got a response after
On Fri, 13 Jul 2007 at 11:17 +0100, -- confabulated:
How can I get the plugin? I have emailed the webmaster a couple of times
but no response :(
I haven't received a response either.
-
_|_
(_| |
How can I get the plugin? I have emailed the webmaster a couple of times
but no response :(
--
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
Hallo John,
On Thu, Jul 12, 2007 at 08:19:04AM -0700, John Rudd wrote:
> >
> >I have this in /var/lib/clamav at the moment:
> >
> > drwxr-xr-x 2 clamav clamav4096 2007-07-12 14:22
> > clamav-29a2fe02977a1d4c26abf3fd199d1e70
> > -rw-r--r-- 1 clamav clamav 995915 2007-07-11 22:48 daily.cv
Johann Spies wrote:
On Thu, Jul 12, 2007 at 11:54:51AM +0200, Robert Schetterer wrote:
Hi, after having good results in the beginning
with pdfinfo ,
no one of the following pdf spam was catched/marked
i am now using
clam and Sanesecurity to eleminate pdf spam.
I have tried that, but clamav
On Thu, Jul 12, 2007 at 05:50:37PM +0530, Suhas Ingale wrote:
> Is there any other way/plugin to catch these pdf spam? And which is
> compatible with SA 3.1.7
Use sa-update.
--
Randomly Selected Tagline:
"A two party system is kind-of like a two stroke engine. Alot is wasted
in the form of nois
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Bill Randle schrieb:
> On Thu, 2007-07-12 at 16:03 +0200, Johann Spies wrote:
>> On Thu, Jul 12, 2007 at 11:54:51AM +0200, Robert Schetterer wrote:
>>> i am now using
>>> clam and Sanesecurity to eleminate pdf spam.
>> I have tried that, but clamav did
On Thu, 2007-07-12 at 16:03 +0200, Johann Spies wrote:
> On Thu, Jul 12, 2007 at 11:54:51AM +0200, Robert Schetterer wrote:
> > >
> > i am now using
> > clam and Sanesecurity to eleminate pdf spam.
>
> I have tried that, but clamav did not pick up one when scanning a
> bunch of the pdf-spam. I h
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Johann Spies schrieb:
> On Thu, Jul 12, 2007 at 11:54:51AM +0200, Robert Schetterer wrote:
>> Hi, after having good results in the beginning
>> with pdfinfo ,
>> no one of the following pdf spam was catched/marked
>>
&g
Robert Schetterer wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jeremy Fairbrass schrieb:
I'm running PDFInfo 0.3 with SA 3.1.8 and it works fine for me - and I'm
even running it on Windows! :)
Cheers,
Jeremy
"Suhas Ingale" <[EMAIL PROTECTED]
&
On Thu, Jul 12, 2007 at 11:54:51AM +0200, Robert Schetterer wrote:
> >
> Hi, after having good results in the beginning
> with pdfinfo ,
> no one of the following pdf spam was catched/marked
>
> i am now using
> clam and Sanesecurity to eleminate pdf spam.
I have tried
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi, @ll
the newest version of pdfinfo plugin
matched some new pdf spam right now
* 2.0 GMD_PDF_FUZZY2_T3 BODY: Fuzzy MD5 Match
* 3D4E25DE4A05695681D694716D579474
well done !
- --
Mit freundlichen Gruessen
Best Regards
Robert
2007 3:25 PM
> To: Jeremy Fairbrass
> Cc: users@spamassassin.apache.org
> Subject: Re: PDFInfo plugin with SA 3.1.7
>
> Jeremy Fairbrass schrieb:
>> I'm running PDFInfo 0.3 with SA 3.1.8 and it works fine for me - and I'm
>> even running it on Windows! :)
>
&
y 12, 2007 3:25 PM
To: Jeremy Fairbrass
Cc: users@spamassassin.apache.org
Subject: Re: PDFInfo plugin with SA 3.1.7
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jeremy Fairbrass schrieb:
I'm running PDFInfo 0.3 with SA 3.1.8 and it works fine for me - and I'm
even running it on Window
Is there any other way/plugin to catch these pdf spam? And which is
compatible with SA 3.1.7
-Original Message-
From: Robert Schetterer [mailto:[EMAIL PROTECTED]
Sent: Thursday, July 12, 2007 3:25 PM
To: Jeremy Fairbrass
Cc: users@spamassassin.apache.org
Subject: Re: PDFInfo plugin with
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jeremy Fairbrass schrieb:
> I'm running PDFInfo 0.3 with SA 3.1.8 and it works fine for me - and I'm
> even running it on Windows! :)
>
> Cheers,
> Jeremy
>
>
>
> "Suhas Ingale" <[EMAIL PRO
I'm running PDFInfo 0.3 with SA 3.1.8 and it works fine for me - and I'm
even running it on Windows! :)
Cheers,
Jeremy
"Suhas Ingale" <[EMAIL PROTECTED]> wrote in message
news:!&[EMAIL PROTECTED]
Hello,
I am trying to run PDFInfo plugin with SA
Daniel J McDonald wrote:
On Wed, 2007-07-11 at 14:49 +0530, Suhas Ingale wrote:
Has anyone tried running PDFInfo plugin with 3.1.7 version?
No, finally got it working yesterday evening using 3.2.1, but the
initial results are underwhelming. Almost 100% overlap with
TVD_SPACE_RATIO
On Wed, 2007-07-11 at 14:49 +0530, Suhas Ingale wrote:
> Has anyone tried running PDFInfo plugin with 3.1.7 version?
>
No, finally got it working yesterday evening using 3.2.1, but the
initial results are underwhelming. Almost 100% overlap with
TVD_SPACE_RATIO. Only one miss:
sud
Hello,
I am trying to run PDFInfo plugin with SA 3.1.7. SA registers the plugin
successfully but does not scan the PDFs in the emails. According to Dallas
Engelken (Creator of PDFInfo) , The MIME parser in SA is not seeing a PDF
attachment on this message.
Has anyone tried running PDFInfo
53 matches
Mail list logo