[Mimedefang] PDF spam

[Kevin A. McGrail]

I'm also using the PDFInfo.pm by Dallas with good success.  There is one 
variant slippy through that I'm still working on though.

http://rulesemporium.com/plugins.htm

Regards,
KAM
----- Original Message ----- 
From: "Jason Bertoch" <jason at electronet.net>
To: <mimedefang at lists.roaringpenguin.com>
Sent: Friday, July 27, 2007 1:02 PM
Subject: RE: [Mimedefang] PDF spam


> On Friday, July 27, 2007 12:45 PM Michael Sofka wrote:
>
>> Does anybody on the list have experience with the Sanesecurity
>> ClamAV virus signatures: http://sanesecurity.co.uk/.  I'm
>> particularyinterested in their ability to block PDF spam.
>>
>
> Overall, I've had tremendous success with the Sanesecurity signatures, 
> including
> their ability to stop pdf spam.  I have also had a couple of false 
> positives
> where I'm still trying to identify the cause and notify the author.  If I 
> get
> any more, I'll probably have to run a second clam daemon, load the Sanesec 
> sigs
> there only, and use the SA clam plugin.
>
>
> Jason A. Bertoch
> Network Administrator
> jason at electronet.net
> ElectroNet Intermedia Consulting
> 3411 Capital Medical Blvd.
> Tallahassee, FL 32308
> (V) 850.222.0229 (F) 850.222.8771
>
> _______________________________________________
> NOTE: If there is a disclaimer or other legal boilerplate in the above
> message, it is NULL AND VOID.  You may ignore it.
>
> Visit http://www.mimedefang.org and http://www.roaringpenguin.com
> MIMEDefang mailing list MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
>