procmail
[Top] [All Lists]

Re: PDF spam

2007-07-22 11:10:19

Look at the first five (or so) characters in base64 encoding.  Encoding
for a PDF file seems to start always with 'JVBER'.  One can also identify
GIF, JPG, PNG, etc. the same way.

So something like:

:0B
* ^JVBER
PDF-junk

                                - fleet -
____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>