Adam Cécile (Le_Vert) wrote:
RW a écrit :
On Tue, 5 May 2009 14:44:29 +0200
Matus UHLAR - fantomas <uh...@fantomas.sk> wrote:
On 05.05.09 14:16, "Adam Cécile (Le_Vert)" wrote:
Both my personnal and pro. emails get this stupid spam.
Here is the image: http://dedibox.le-vert.net/divers/DSC4444.png
Is there any rules that can block it ? It seems the picture is
always the same.
OCR module like FuzzyOCR should catch that. I just fed the image to
gocr, ocrad and tesseract (OCRs I've found in debian) and allo of
them were able to catch at least the "VIAGRA HOT OFFER" (gocr was the
best at that).
However you will apparently need SA from SVN...
I think it's supposed to be the other way around - according to the
FuzzyOCR site you need the development version of the plug-in for
recent versions of SA.
However I've tried the p5-FuzzyOcr and p5-FuzzyOcr-devel ports in
FreeBSD, both of which are pretty old, 2.3b and 3.4.2, and they work
for me, at least with a few test messages. I have seen SA die quite a
lot with SIGPIPE, but that happens anyway (I think due to razor) so
I'm not really sure about whether FuzzyOcr is flakey . It always seems
to work on the next attempt.
Hello,
Thanks for all your replies. I was working on it at work and figured
out that fuzzyocr is now included in debian testing/sid.
A quick backport for stable (no changes needed, only rebuild) later, I
had the package installed on my MTAs and this stupid SPAM gets +10
from FuzzyOCR.
No additionnal configuration is required, just install the package (I
added gocr and ocrad too) and restart amavis.
Awesome!
Adam.
This spam is fly-by-night and you won't receive this after a week or so.
It is the same spammer sending spam of the form.
$SOME LONG SENTENCE THE SPAMMER DECIDED LOOKED GOOD.
$WEB_LINK
I guess the OCR thing will catch it but overkill for the time this is
spam. Also BOTNET / EMPTY_MESSAGE / SORBS / BAYES / DATE_IN_FUTURE / PBL
all trigger on this spam.
