[Mimedefang] Image blocking idea

Martin Blapp mb at imp.ch
Thu Apr 20 10:36:58 EDT 2006


Hi,

> I should have been clearer. I don't even believe they aren't even modifying
> the image.  Indications are that they are simply truncating or adding random
> bits to the file because even a slightly corrupted image is still displayed.

We already do 'Image checksumming' here with a modified pyzor (patches
are available at http://antispam.imp.ch.

The problem is that you first have to catch one of those graphics and in
the last time they change often. Even with 250 spamtraps we let passing
a lot of those mails passing the filter. I've not seen any instant changing
pics up to now, but I guess the spammers will soon do this.

The results I get from the ocr plugin are a lot better !

Martin



More information about the MIMEDefang mailing list