Image Blocking workaround

[jholder]

Hello!
SpamAssassin has been woorking great.

However, lately, I've been getting a single SPAM message. Somehow the sender has gotton around the auto block on the images. I've included the code from the e-mail below.

Anyway, when I open my e-mail, it's automatically displaying the image...thus confirming the existance of the spam-ee's adress.

I was wondering if they had figured out a workaround to the image-blocking...or what.

<FONT face=3DArial size=3D2><A href=3D"http://prkffa.plestshoe.info/?23075838"><IMG alt=3D"" =
hspace=3D0=20= src=3D"cid:000301c64a92$2fd0c6d0$aa0fa8c0@sanya" align=3Dbaseline=20 border=3D0>

I report it as spam, but I just don't think spam assassin is designed to catch this type of thing.

ideas?

[KevinH]

What do the spam headers look like?

Reporting it should help train SA and in the next release we've enhanced training to train DSPAM as well. So one more bit of spam blocking is included and configured for you.

[jholder]

Howdy,

Received: from localhost (localhost.localdomain [127.0.0.1])
	by tusd-exch01.tombstone.k12.az.us (Postfix) with ESMTP id ED2A3BC025
	for <jholder@tombstone.k12.az.us>; Mon, 20 Mar 2006 22:36:33 -0700 (MST)
Received: from tusd-exch01.tombstone.k12.az.us ([127.0.0.1])
 by localhost (tusd-exch01.tombstone.k12.az.us [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 03437-06 for <jholder@tombstone.k12.az.us>;
 Mon, 20 Mar 2006 22:36:30 -0700 (MST)
Received: from friend (unknown [213.27.11.38])
	by tusd-exch01.tombstone.k12.az.us (Postfix) with ESMTP id 9F985BC023
	for <jholder@tombstone.k12.az.us>; Mon, 20 Mar 2006 22:36:24 -0700 (MST)
Message-ID: <000001c64ca7$a9e14500$0100007f@kohan>
From: "Henry" <hugh@paramed.biz>
To: <jholder@tombstone.k12.az.us>
Subject: Thousands of customers, meds online. 
Date: Tue, 21 Mar 2006 08:24:02 +0100
MIME-Version: 1.0
Content-Type: multipart/related;
	type="multipart/alternative";
	boundary="------------ms000709020507030906050304"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Virus-Scanned: amavisd-new at

So you you prefer DSPAM more than Spam Assassin? I don't really have a spam problem now, but I know the more I use my e-mail, the more I will.

BTW: I have some wicked NATting and routing goin on. I know I"m routed to localhost.

Also, I was wondering if you guys are going to any Linux conferences or anything. Perhaps Linux Expo? They'll be in SF in Aug.

I'd love to go to SF and see some of your latest developments.

thx

[KevinH]

Yep this is a bug:

http://bugzilla.zimbra.com/show_bug.cgi?id=6568

The message was over 32k so it skips all spam checking. We plan to increase the default so a larger % or these messages get caught. The bug has the key to change if you want to increase your value locally. 100k would probably be a good default based on the message I've seen that try to get by this limit (40k, 65k, etc).

Also, I was wondering if you guys are going to any Linux conferences or anything. Perhaps Linux Expo? They'll be in SF in Aug.

I'd love to go to SF and see some of your latest developments.

Yes we'll be at both the Boston and San Francisco shows. We attended both last year and plan to do the same this year. Scott is speaking at the Boston event. The SF event details are not finalized but we'll be sure to post more details once they are.

[jholder]

Hey, thanks.
I guess it might be a good idea to start checking Bugzilla, eh?

C ya ltr.