ycles
>> - next if ($line =~ /[\x80-\xff]/);
>>
>> Thank you very much for the detailed analysis. I had seen this problem
>> on some PDFs but have not had the time to dive into the issue. You
>> vastly reduced the pain of fixing it.
>>
>>
>> > I'
ing it.
>
>
> > I'm trying to create a couple rules to identify questionable PDFs
> > (phishing, etc.). While evaluating the debug output from spamassassin
> > for
> > the pdfinfo plugin, I noticed that some of the test file attributes
> > aren't
> > being
not had the time to dive into the issue. You
vastly reduced the pain of fixing it.
I'm trying to create a couple rules to identify questionable PDFs
(phishing, etc.). While evaluating the debug output from spamassassin
for
the pdfinfo plugin, I noticed that some of the test file attributes
If this is the wrong forum to report this, let me know.
I'm trying to create a couple rules to identify questionable PDFs
(phishing, etc.). While evaluating the debug output from spamassassin for
the pdfinfo plugin, I noticed that some of the test file attributes aren't
being populated correctly
Hello,
I still use the pdfinfo plugin from Dallas Engelken (and it still hits on some
messages). But does anyone know the status of the plugin? Is it maintained?
Does it make sense to use it with spamassassin 3.4.0 or is a similar
functionality already included there?
Best regards
Stefan
On 12/02/2014 11:58 AM, Stefan Jakobs wrote:
Hello,
I still use the pdfinfo plugin from Dallas Engelken (and it still hits on some
messages). But does anyone know the status of the plugin? Is it maintained?
I'm partially to blame this plugin exists - rule support, etc.
Does it make sense
On Tue, 2 Dec 2014, Axb wrote:
On 12/02/2014 11:58 AM, Stefan Jakobs wrote:
Hello,
I still use the pdfinfo plugin from Dallas Engelken (and it still hits on
some
messages). But does anyone know the status of the plugin? Is it
maintained?
I'm partially to blame this plugin exists
On 12/02/2014 07:02 PM, John Hardin wrote:
On Tue, 2 Dec 2014, Axb wrote:
On 12/02/2014 11:58 AM, Stefan Jakobs wrote:
Hello,
I still use the pdfinfo plugin from Dallas Engelken (and it still
hits on
some
messages). But does anyone know the status of the plugin? Is it
maintained?
I'm
On 12/02/2014 07:02 PM, John Hardin wrote:
On Tue, 2 Dec 2014, Axb wrote:
On 12/02/2014 11:58 AM, Stefan Jakobs wrote:
Hello,
I still use the pdfinfo plugin from Dallas Engelken (and it still
hits on
some
messages). But does anyone know the status of the plugin? Is it
maintained?
I'm
On 8/20/07, Robert Fitzpatrick [EMAIL PROTECTED] wrote:
The plugins page at SARE says this is 0.8, but is it? The pm file looks
fine.
http://www.rulesemporium.com/plugins/pdfinfo.cf
You probably want to be looking at:
http://www.rulesemporium.com/plugins/PDFInfo.pm
not the .cf file. It
The plugins page at SARE says this is 0.8, but is it? The pm file looks
fine.
http://www.rulesemporium.com/plugins/pdfinfo.cf
--
Robert
hi
i'm using pdfinfo plugin/rules, some messages are rejected, but many
spams are passed...
how can I increase the pdfplugin plugin/rules ??
any tips?
Rejaine Monteiro wrote on Thu, 16 Aug 2007 11:57:00 -0300:
how can I increase the pdfplugin plugin/rules ??
any tips?
Give more details, please.
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
how can I block some prohibitive words on pdf files, like FuzzyOCR do,
for example...
Kai Schaetzl escreveu:
Rejaine Monteiro wrote on Thu, 16 Aug 2007 11:57:00 -0300:
how can I increase the pdfplugin plugin/rules ??
any tips?
Give more details, please.
Kai
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
CharlesLai schrieb:
Just copy the PDFInfo.pm plugin into the default directory for Spamassassin
plugins:
sudo cp /downloads/pdfinfo/PDFInfo.pm
/Library/Perl/5.8.6/Mail/SpamAssassin/Plugin/
Remember that putting your custom plugins
into /etc/mail/spamassassin
and
placed PDFInfo.pm into /etc/mail/spamassassin/Plugin
I then amended /etc/mail/spamassassin/init.pre with the
following line
loadplugin Mail::SpamAssassin::Plugin::PDFInfo /etc/mail/
spamassassin/Plugin/PDFInfo.pm
However
PDF spam mail does not seem to be using
...
--
View this message in context:
http://www.nabble.com/My-bash-script-to-upload-PDFinfo-daily%2C-safely-tf4115144.html#a11732078
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
of config file...
if wget -q -O $PM http://www.rulesemporium.com/plugins/PDFInfo.pm
\
wget -q -O $CF http://www.rulesemporium.com/plugins/pdfinfo.cf
\
perl -MMail::SpamAssassin::Plugin::PDFInfo -e print Perl Module
PDFInfo OK\n \
test -s $CF
Guys
These are NOT AV signatures to be updated every day/hour, whatever
Hammering the site won't make it any better and not help to keep it going.
Seems some ppl still haven't understood that hammer-leeching spoils it
for everyone and themselves.
and themselves.
People are still getting PDF spams?
I'm finding with a current version of SA and the sane security clamav
signatures, that none have gotten through for a few days now.
Do we really need a PDFinfo at this point?
Andy
---
Andy Dills
Xecunet, Inc.
www.xecu.net
301-682-9972
---
it for
everyone and themselves.
People are still getting PDF spams?
I'm finding with a current version of SA and the sane security clamav
signatures, that none have gotten through for a few days now.
Do we really need a PDFinfo at this point?
Yes. Definitely.
I'm only using the signatures
On Fri, 20 Jul 2007, Matthias Keller wrote:
I'm only using the signatures with the spamassassin plugin because I found
them to be too invasive. I dont allow anyone to block a mail at SMTP level
just because it contains ONE sentence. The sanesecurity signatures also
contain a LOT of single
...
if wget -q -O $PM http://www.rulesemporium.com/plugins/PDFInfo.pm
\
wget -q -O $CF http://www.rulesemporium.com/plugins/pdfinfo.cf
\
perl -MMail::SpamAssassin::Plugin::PDFInfo -e print Perl Module PDFInfo
OK\n \
test -s $CF ; then
echo
Hi,
Anyone have any idea of the following error message when using SA 3.1.7
and PDFInfo?
[EMAIL PROTECTED] spamassassin]# spamassassin --lint
[10850] warn: plugin: failed to create instance of plugin
Mail::SpamAssassin::Plugin::PDFinfo: Can't locate object method new
via package Mail
Hallo John,
On Thu, Jul 12, 2007 at 08:19:04AM -0700, John Rudd wrote:
I have this in /var/lib/clamav at the moment:
drwxr-xr-x 2 clamav clamav4096 2007-07-12 14:22
clamav-29a2fe02977a1d4c26abf3fd199d1e70
-rw-r--r-- 1 clamav clamav 995915 2007-07-11 22:48 daily.cvd
On Fri, 13 Jul 2007 at 11:17 +0100, -- confabulated:
How can I get the plugin? I have emailed the webmaster a couple of times
but no response :(
I haven't received a response either.
-
_|_
(_| |
At 05:07 AM Friday, 7/13/2007, you wrote -=
On Fri, 13 Jul 2007 at 11:17 +0100, -- confabulated:
How can I get the plugin? I have emailed the webmaster a couple of times
but no response :(
I haven't received a response either.
FYI, I emailed a second time, nicely, and got a response after
How can I get the plugin? I have emailed the webmaster a couple of times
but no response :(
--
--[ UxBoD ]--
// PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
Just verified a couple of PDF attachments getting through with our
PDFInfo rules. Can someone test these to see if my PDF rules are working
or if you're able to block? I believe the rules are working as the
latter message is hitting one, just not enough to block. I tried my
access to the PDFInfo
On Fri, Jul 13, 2007 at 12:28:39PM -0400, Robert Fitzpatrick wrote:
Just verified a couple of PDF attachments getting through with our
PDFInfo rules. Can someone test these to see if my PDF rules are working
or if you're able to block?
I don't use PDFInfo, but both of these messages caused
On Fri, 2007-07-13 at 12:28 -0400, Robert Fitzpatrick wrote:
Just verified a couple of PDF attachments getting through with our
PDFInfo rules. Can someone test these to see if my PDF rules are working
or if you're able to block? I believe the rules are working as the
latter message is hitting
Duane Hill wrote:
On Fri, 13 Jul 2007 at 11:17 +0100, -- confabulated:
How can I get the plugin? I have emailed the webmaster a couple of times
but no response :(
I haven't received a response either.
Duane,
We sent you the information on July 3rd, same day you requested it, and
you
a response after a few
days.
Well, the subject on your first email was not PDFInfo Access, so you
get tossed aside and dealt with last ;)
There is more than 1 person answering these requests... so if you dont
have an answer in a day or so, just yell.
On Fri, 13 Jul 2007 at 14:36 -0500, [EMAIL PROTECTED] confabulated:
Duane Hill wrote:
On Fri, 13 Jul 2007 at 11:17 +0100, -- confabulated:
How can I get the plugin? I have emailed the webmaster a couple of times
but no response :(
I haven't received a response either.
Duane,
We sent
McDonald, Dan wrote:
On Fri, 2007-07-13 at 12:28 -0400, Robert Fitzpatrick wrote:
Just verified a couple of PDF attachments getting through with our
PDFInfo rules. Can someone test these to see if my PDF rules are working
or if you're able to block? I believe the rules are working
I'm running PDFInfo 0.3 with SA 3.1.8 and it works fine for me - and I'm
even running it on Windows! :)
Cheers,
Jeremy
Suhas Ingale [EMAIL PROTECTED] wrote in message
news:![EMAIL PROTECTED]
Hello,
I am trying to run PDFInfo plugin with SA 3.1.7. SA registers the plugin
successfully
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jeremy Fairbrass schrieb:
I'm running PDFInfo 0.3 with SA 3.1.8 and it works fine for me - and I'm
even running it on Windows! :)
Cheers,
Jeremy
Suhas Ingale [EMAIL PROTECTED]
mailto:[EMAIL PROTECTED] wrote in message
Is there any other way/plugin to catch these pdf spam? And which is
compatible with SA 3.1.7
-Original Message-
From: Robert Schetterer [mailto:[EMAIL PROTECTED]
Sent: Thursday, July 12, 2007 3:25 PM
To: Jeremy Fairbrass
Cc: users@spamassassin.apache.org
Subject: Re: PDFInfo plugin
, 2007 3:25 PM
To: Jeremy Fairbrass
Cc: users@spamassassin.apache.org
Subject: Re: PDFInfo plugin with SA 3.1.7
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jeremy Fairbrass schrieb:
I'm running PDFInfo 0.3 with SA 3.1.8 and it works fine for me - and I'm
even running it on Windows! :)
Cheers
Fairbrass
Cc: users@spamassassin.apache.org
Subject: Re: PDFInfo plugin with SA 3.1.7
Jeremy Fairbrass schrieb:
I'm running PDFInfo 0.3 with SA 3.1.8 and it works fine for me - and I'm
even running it on Windows! :)
Cheers,
Jeremy
Suhas Ingale [EMAIL PROTECTED]
mailto
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi, @ll
the newest version of pdfinfo plugin
matched some new pdf spam right now
* 2.0 GMD_PDF_FUZZY2_T3 BODY: Fuzzy MD5 Match
* 3D4E25DE4A05695681D694716D579474
well done !
- --
Mit freundlichen Gruessen
Best Regards
Robert
Robert Schetterer wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jeremy Fairbrass schrieb:
I'm running PDFInfo 0.3 with SA 3.1.8 and it works fine for me - and I'm
even running it on Windows! :)
Cheers,
Jeremy
Suhas Ingale [EMAIL PROTECTED]
mailto:[EMAIL PROTECTED] wrote
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Johann Spies schrieb:
On Thu, Jul 12, 2007 at 11:54:51AM +0200, Robert Schetterer wrote:
Hi, after having good results in the beginning
with pdfinfo ,
no one of the following pdf spam was catched/marked
i am now using
clam and Sanesecurity
On Thu, 2007-07-12 at 16:03 +0200, Johann Spies wrote:
On Thu, Jul 12, 2007 at 11:54:51AM +0200, Robert Schetterer wrote:
i am now using
clam and Sanesecurity to eleminate pdf spam.
I have tried that, but clamav did not pick up one when scanning a
bunch of the pdf-spam. I have used
On Thu, Jul 12, 2007 at 11:54:51AM +0200, Robert Schetterer wrote:
Hi, after having good results in the beginning
with pdfinfo ,
no one of the following pdf spam was catched/marked
i am now using
clam and Sanesecurity to eleminate pdf spam.
I have tried that, but clamav did not pick up
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Bill Randle schrieb:
On Thu, 2007-07-12 at 16:03 +0200, Johann Spies wrote:
On Thu, Jul 12, 2007 at 11:54:51AM +0200, Robert Schetterer wrote:
i am now using
clam and Sanesecurity to eleminate pdf spam.
I have tried that, but clamav did not pick
On Thu, Jul 12, 2007 at 05:50:37PM +0530, Suhas Ingale wrote:
Is there any other way/plugin to catch these pdf spam? And which is
compatible with SA 3.1.7
Use sa-update.
--
Randomly Selected Tagline:
A two party system is kind-of like a two stroke engine. Alot is wasted
in the form of noise
Johann Spies wrote:
On Thu, Jul 12, 2007 at 11:54:51AM +0200, Robert Schetterer wrote:
Hi, after having good results in the beginning
with pdfinfo ,
no one of the following pdf spam was catched/marked
i am now using
clam and Sanesecurity to eleminate pdf spam.
I have tried that, but clamav
Hello,
I am trying to run PDFInfo plugin with SA 3.1.7. SA registers the plugin
successfully but does not scan the PDFs in the emails. According to Dallas
Engelken (Creator of PDFInfo) , The MIME parser in SA is not seeing a PDF
attachment on this message.
Has anyone tried running PDFInfo
On Wed, 2007-07-11 at 14:49 +0530, Suhas Ingale wrote:
Has anyone tried running PDFInfo plugin with 3.1.7 version?
No, finally got it working yesterday evening using 3.2.1, but the
initial results are underwhelming. Almost 100% overlap with
TVD_SPACE_RATIO. Only one miss:
sudo grep GMD_PDF
Daniel J McDonald wrote:
On Wed, 2007-07-11 at 14:49 +0530, Suhas Ingale wrote:
Has anyone tried running PDFInfo plugin with 3.1.7 version?
No, finally got it working yesterday evening using 3.2.1, but the
initial results are underwhelming. Almost 100% overlap with
TVD_SPACE_RATIO
51 matches
Mail list logo
