procmail
[Top] [All Lists]

Re: PDF spam

2007-07-22 08:27:42

On Fri, 20 Jul 2007, Michelle Konzack wrote:

Am 2007-07-19 21:27:28, schrieb Udi Mottelo:
On Thu, 19 Jul 2007, Michelle Konzack wrote:
----[ '~/.procmail/FLT_pdf' ]-------------------------------------------
####################################################################
#
# FLT_pdf
#
####################################################################

:0 BHh
* -5^0
*  3^1 ^Subject:.*\.pdf
*  1^1 ^Content-Type:.*application/pdf
*  1^1 name=.*\.pdf
*  1^1 filename=.*\.pdf
.ATTENTION.FLT_pdf/
------------------------------------------------------------------------

     No false positive?  I didn't test but I think that any

Oh yes, the "h" is to much, since it would strip the whole Body
from the Message saving apce in the PDF-SPAM-FOLDER.   :-)

     message which attach pdf and include the file name in
     the subject will match the recipe.

I have additional some E-Mails whitelisted, like my ISP since I do
not want to kill the invoices...  Hmmm, or maybe I should?  :-)


        I don't know this pdf spam problem but I whould start with
        filter the file through pdftotext or maybe strings to try
        catch some kyewords.

Bye,
  Udi
____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>