WebTent wrote:
I have a few PDF's getting through now after doing pretty good, the
latest 0.4 pdfinfo + sa 3.1.7 + sare rules + sa-update is not scoring
enough on these:
Current version is v0.6. And sigs for those were added last
Thursday...
http://esmtp.webtent.net/mail1.txt
* 0.6 GMD_PDF_ENCRYPTED BODY: Attached PDF is encrypted
* 2.0 GMD_PDF_FUZZY2_T11 BODY: Fuzzy tags Match
* 5A4CB7600371063164BB7AFA6EDE7FE9
* 0.2 GMD_PDF_EMPTY_BODY BODY: Attached PDF with empty message body
* 3.0 GMD_PDF_STOX_M4 PDF Stox spam
http://esmtp.webtent.net/mail2.txt
* 2.0 GMD_PDF_FUZZY2_T9 BODY: Fuzzy tags Match
* 875C8F0810E6524EF0C3A7C4221A4C28
* 0.6 GMD_PDF_ENCRYPTED BODY: Attached PDF is encrypted
* 0.2 GMD_PDF_EMPTY_BODY BODY: Attached PDF with empty message body
* 3.0 GMD_PDF_STOX_M4 PDF Stox spam
--
Dallas Engelken
[EMAIL PROTECTED]
http://uribl.com
