You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "Christopher X. Candreva" <ch...@westnet.com> on 2006/09/07 14:42:13 UTC

Re: How remove vigra gif message ?

On Thu, 24 Aug 2006, Philippe Couas wrote:

> How could i remover theses messages ?

Sorry for the late reply, I just received notice from the list today that we 
had been 'bouncing' messages.

We rejected this because I have a ClamAV MD5 signature for this image. While 
most images morph, this particular one for whatever reason doesn't. My 
ClamAV sig for this is blocking a few hundred a day.

Anyone using ClamAV can reject these before they ever get to SpamAssasin and 
save some CPU cycles. The signature line is:

25dbdaf1d2a93ab1075161a283e7e245:17940:CXC.ImageSpam.Stock13

Feel free to change the name to whatever you like locally. I have no idea 
why I called this Stock13 at the time.

(If you don't already have one, create a .hdb file where the main/daily.cvd
files are, such as ImageSpam.hdb  . If you installed from source this will 
be in /usr/local/share/clamav . If you didn't -- you're on your own. :-)

-Chris


==========================================================
Chris Candreva  -- chris@westnet.com -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/