Re: [Mimedefang] LZW, Gifs, and fingerprinting stock spams

2006-11-01 Thread Kevin A. McGrail
I'm trying to do some stochastic analysis of stock spams and figure out if there's a common fingerprint that can be used to identify them... Philip: Have you looked at Dallas' ImageInfo.pm? See http://www.rulesemporium.com/plugins.htm. It's a great place to start building image rules.

Re: [Mimedefang] LZW, Gifs, and fingerprinting stock spams

2006-11-01 Thread David F. Skoll
Kevin A. McGrail wrote: I will also say that the stock image spams have been very effective at thwarting traditional anti-spam techniques. Not to blow our own horn too much, but... We've had pretty good luck with our RPTN system. It's a shared Bayes database. A couple of hundred of our

RE: [Mimedefang] LZW, Gifs, and fingerprinting stock spams

2006-11-01 Thread Jason Bertoch [Electronet]
-Original Message- Not to blow our own horn too much, but... We've had pretty good luck with our RPTN system. Regards, David. David, Where might I find more information on the RPTN system? The searchable archives don't seem to be working at the moment. Jason A.

RE: [Mimedefang] LZW, Gifs, and fingerprinting stock spams

2006-11-01 Thread Dave Helton
I have had very good success with this plugin for SA. http://wiki.apache.org/spamassassin/FuzzyOcrPlugin config file allows you to add/remove keywords, and the program keeps a hash of known images so that they are not ocr'ed again. this plugin also understands animated gifs, something I've

Re: [Mimedefang] LZW, Gifs, and fingerprinting stock spams

2006-11-01 Thread David F. Skoll
Jason Bertoch [Electronet] wrote: Where might I find more information on the RPTN system? The searchable archives don't seem to be working at the moment. We have a white paper (mostly marketing-oriented, alas):

[Mimedefang] Mimedefang and greylist-milter

2006-11-01 Thread Yanick Quirion
Dear all, Is there a way to install the greylist-milter on sendmail when sendmail is already using mimedefang? I want my server answer something similar to the following message on the first connection to prevent SPAM: Deferred: 451 4.7.1 Greylisting in action, please come back Can somebody

Re: [Mimedefang] info cuestions

2006-11-01 Thread Jonas Eckerman
I need to know subject, sender, recipient in filter_sender Why? Any check you want to do based on sender, recipient and subject can be done in filter_begin. ¿I can obtain this data? Not in filter_sender. The callback filter_sender is called from the SMTP command MAIL FROM. That is

[Mimedefang] use Net::LDAP and file descriptor error.

2006-11-01 Thread Matthew Schumacher
List, This code: sub filter_initialize { use Net::LDAP; } Causes me to get this error: mimedefang-multiplexor[612]: WARNING: Something in your Perl filter appears to have opened a file descriptor outside of any function. With embedded Perl, you should move any code that opens a file

Re: [Mimedefang] Mimedefang and greylist-milter

2006-11-01 Thread Scott Larsen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yanick Quirion wrote: Dear all, Is there a way to install the greylist-milter on sendmail when sendmail is already using mimedefang? I want my server answer something similar to the following message on the first connection to prevent SPAM:

Re: [Mimedefang] use Net::LDAP and file descriptor error.

2006-11-01 Thread Dave O'Neill
On Wed, Nov 01, 2006 at 01:04:11PM -0900, Matthew Schumacher wrote: Since I'm putting it in filter_initialize and my filters seem to work fine I'm thinking that I can safely ignore it, but I want to double check with the list. Anyone have thoughts on why this wouldn't work? It's safe to

Re: [Mimedefang] use Net::LDAP and file descriptor error.

2006-11-01 Thread Matthew Schumacher
Dave O'Neill wrote: It's safe to ignore. That warning's getting removed in a future version of MIMEDefang anyway. The reason you're getting it is because Net::LDAP::Constant is a shocking abuse of Perl. That module opens its own source, via the DATA handle, so that it can parse its own