Re: A rule for empty body and pdf attachment??

Thanks, both of you. Looks like an update to pdfinfo snuck out while I wasn't looking. I've made the adjustments.

Mike-

On Thu, 2 Aug 2007 10:39:20 +0200, you wrote:

>"Michael W Cocke" <cocke@catherders.com> wrote in message news:pf43b3h1e1g5ghv7ud5k3es8mje4vj4m6t@4ax.com...
>> These blasted PDF spams are driving me mad! Any ideas for a rule that
>> would trip if there's no text in the body, just a PDF attachment ?
>>
>> (I'm using the PDFinfo plugin now, but I don't really understand it)
>>
>> Thanks!
>>
>> Mike-
>> --
>> If you're not confused, you're not trying hard enough.
>> --
>> Please note - Due to the intense volume of spam, we have installed
>> site-wide spam filters at catherders.com. If email from you bounces,
>> try non-HTML, non-encoded, non-attachments,
>>
>
>
>If you're using the PDFinfo plugin, you should see a rule called GMD_PDF_EMPTY_BODY on those spams - it should fire on any message
>containing a PDF and a blank body. Obviously you can modify that rule's score if you want to make it higher, or meta it with other
>rules. Also make sure you're using the latest version of the plugin and the associated .cf file from
>www.rulesemporium.com/plugins.htm.
>
>Cheers,
>Jeremy
>
>

--
If you're not confused, you're not trying hard enough.
--
Please note - Due to the intense volume of spam, we have installed 
site-wide spam filters at catherders.com.  If email from you bounces,
try non-HTML, non-encoded, non-attachments,