On Mon, Feb 12, 2007 at 10:44:54AM -0600, Martin McCormick wrote: > John Hasler writes: > > I once did a google search describing Email messages > consisting of random text with a binary attachment and this may > be a variant of what is called the "bugbare" virus in which a > .gif file is the means of infection. The only thing that didn't > match was that bugbear makes a gif file with a compound extension > like .exe.gif. It could also be that the thugs have refined it > so as to make more normal-looking files. > > To me, this is interesting but the goal is to > mechanically detect those darn things and shunt them in to the > spam folder as they frequently get by bogofilter.
three things... 1) don't quote spam on this list. 2) if you're worried about detecting viruses and dumping them (not a bad idea as they account for a reasonable portion of spam), then use an av setup like clamav. I run clamav on my local mailserver and if it hits a virus, blackholes it. I never see it and I've probably cut my spam by 15% or so without ever looking for "spam". 3) it is fairly trivial to flag all messages with a .gif attachment as spam and chuck it in the right box. bogofilter is not the way to do that though. Even something like a procmail rule may suffice. certainly, various configs in your MTA could handle attachments. .02 A
signature.asc
Description: Digital signature
