Results 1 to 8 of 8

Thread: pdf Spam

  1. #1
    goabaskar is offline Junior Member
    Join Date
    Jun 2007
    Location
    Chennai, INDIA
    Posts
    5
    Rep Power
    7

    Default pdf Spam

    Hi,

    Is there any method to prevent PDF spam's by adding rules to spamassasin or adding any other module to ZCS.

    Currently I am using zcg 4.5.6 in FC5.

    Thanks,

    M.Baskar

  2. #2
    goabaskar is offline Junior Member
    Join Date
    Jun 2007
    Location
    Chennai, INDIA
    Posts
    5
    Rep Power
    7

    Default

    Hello,

    I found this this nice how-to forge article via RootPrompt -- Nothing but Unix.

    Link to howtoforge--> Filtering PDF-/XLS-/Image-Spam With ClamAV (And ISPConfig) On Debian/Ubuntu | HowtoForge - Linux Howtos and Tutorials

    I wanted to test it and its working well.

    Before starting please check if the following packages are present.

    curl
    rsync
    gzip

    I did the following things to make it work.

    zimbra:/#mkdir sanesecurity
    zimbra:/#cd sanesecurity
    zimbra:/sanesecurity#wget http://sanesecurity.co.uk/clamav/ss-msrbl.sh
    zimbra:/sanesecurity#vi ss-msrbl.sh

    Edited the following lines
    PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/opt/zimbra/clamav/bin/
    clam_sigs="/opt/zimbra/clamav/db"
    clam_user="zimbra"

    Changed the permission to execute
    zimbra:/sanesecurity#chmod 755 ss-msrbl.sh

    Executed the file
    zimbra:/sanesecurity#./ss-msrbl.sh

    Restarted zimbra

    zmcontrol stop
    zmcontrol start


    This is working very well. This can be checked by the following command.

    zimbra:/#cat /var/log/zimbra.log | grep "Sanes"

    Hope this will be useful.

    Regards,

    M.Baskar

  3. #3
    celeron is offline Active Member
    Join Date
    Jan 2007
    Posts
    49
    Rep Power
    8

    Default

    That's wonderful! However, Each time clamav detech one pdf spam, admin account will send to users one notice mail. Do you have any ways to prevent this thing?

    Thanks for regard.
    Last edited by celeron; 08-08-2007 at 02:14 AM.

  4. #4
    maerten is offline Awaiting Activation
    Join Date
    Aug 2007
    Posts
    12
    Rep Power
    0

    Default

    Be aware, this method places the spam mail in the quarantine in stead of the Junk folder. It's better to give PDF mail a higher spam score via SpamAssassin or install a SpamAssassin plugin that scans PDF mail (SARE - SpamAssassin Rules Emporium)

  5. #5
    bhickey's Avatar
    bhickey is offline Advanced Member
    Join Date
    Feb 2006
    Posts
    177
    Rep Power
    9

    Default

    Have you tried changing the virus warning attribute?

    su zimbra

    zmprov mcf zimbraVirusWarnRecipient: FALSE

    zmcontrol stop

    zmcontrol start

  6. #6
    dhickey is offline Intermediate Member
    Join Date
    Feb 2006
    Posts
    23
    Rep Power
    9

    Default

    Quote Originally Posted by bhickey View Post
    Have you tried changing the virus warning attribute?

    su zimbra

    zmprov mcf zimbraVirusWarnRecipient: FALSE

    zmcontrol stop

    zmcontrol start

    Guys,

    I had to use

    zmprov mcf zimbraVirusWarnRecipient FALSE

    Otherwise I got an error...just an FYI..

    Thanks

    Don

  7. #7
    bhickey's Avatar
    bhickey is offline Advanced Member
    Join Date
    Feb 2006
    Posts
    177
    Rep Power
    9

    Default

    Yep, the colon doesn't belong.

  8. #8
    celeron is offline Active Member
    Join Date
    Jan 2007
    Posts
    49
    Rep Power
    8

    Default Spam

    Hi,
    Nowadays, I receive many spam mails with signs: +, -, * which merge between the words. Example: marke*t, sa+le, ...

    Do you know any ways to reject this spam mails?

    Thanks for advice.
    Last edited by celeron; 08-19-2007 at 07:33 PM.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Trying to understand Zimbra's anti-spam system
    By TaskMaster in forum Users
    Replies: 11
    Last Post: 01-25-2008, 09:59 AM
  2. Spam being scored with BAYES_00
    By flyerguybham in forum Administrators
    Replies: 6
    Last Post: 04-24-2007, 12:07 PM
  3. How to check if spam training is working?
    By tbovingdon in forum Administrators
    Replies: 1
    Last Post: 03-13-2007, 05:57 AM
  4. Training spam and ham
    By Justin in forum Developers
    Replies: 2
    Last Post: 10-31-2006, 03:39 PM
  5. Spam questions 3.11
    By cdyer in forum Administrators
    Replies: 10
    Last Post: 05-22-2006, 10:14 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •