-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Wael Shahin wrote:
> On Wed, 2007-06-27 at 09:18 +0200, Robert Schetterer wrote:
> Stéphane LEPREVOST schrieb:
>>>> Hi,
>>>>
>>>> Got one yesterday too here. Seems to be a new way for spammers ...
>>>>
>> I have two servers one is running DCC and one is not, the one that is
>> running DCC didn't pass the message or maybe I am mistaken but it didn't
>> go through (Maybe didn't get there at all from the first place).
>> On the other server that is not running DCC the email went through and
>> it was an empty email body with a PDF attachment
>>>> -----Message d'origine-----
>>>> De : Raymond Myren [mailto:[EMAIL PROTECTED]
>>>> Envoyé : mercredi 27 juin 2007 08:09
>>>> ì : users@spamassassin.apache.org
>>>> Objet : Spam PDF
>>>>
>>>> Hello,
>>>>
>>>> Just today I started receiving spam mails with attached .pdf files with a
>>>> spam image.
>>>> Any ideas how to stop this spam type?
>>>>
>>>> \raymond
>>>>
> Hi Stephane,
> unless the mail isnt caught by other rules
> or bayes, i still dont know any way to mark this,
> so yesterday on got trough at my server too
> i ve asked on the list what to do aginst it , but havent got any usefull
> answer.
> Perhaps it would be easier to use clamav to filter
> such mails out, i think i will asked there
> ----
> Wael
We just caught one:
Content analysis details: (5.0 points, 4.0 required)
pts rule name description
- ---- ----------------------
- --------------------------------------------------
0.6 SPF_SOFTFAIL SPF: sender does not match SPF record
(softfail)
0.4 BAYES_60 BODY: Bayesian spam probability is 60 to 80%
[score: 0.7404]
2.2 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO
0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
address
[201.32.227.251 listed in dnsbl.sorbs.net]
0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[201.32.227.251 listed in zen.spamhaus.org]
- --
Steve
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFGglxneERILVgMyvARAtK4AJ944YGr+IfI+3FYEkonqklmyNgj2wCeLGKK
oXS7J7pypbbL/6ADur+rhAg=
=Rxu9
-----END PGP SIGNATURE-----
