procmail
[Top] [All Lists]

Re: PDF spam

2007-07-24 06:00:00
Am 2007-07-22 14:02:17, schrieb fleet(_at_)teachout(_dot_)org:

Look at the first five (or so) characters in base64 encoding.  Encoding
for a PDF file seems to start always with 'JVBER'.  One can also identify
GIF, JPG, PNG, etc. the same way.

So something like:

:0B
* ^JVBER
PDF-junk

Oi!  :-)

Greetings
    Michelle Konzack
    Systemadministrator
    Tamay Dogan Network
    Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack   Apt. 917                  ICQ #328449886
                   50, rue de Soultz         MSN LinuxMichi
0033/6/61925193    67100 Strasbourg/France   IRC #Debian (irc.icq.com)
____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>