RE: New Spam Technique

MailScanner is a beautiful open source solution. You configure it in
your Unix box and you will stop all these junk e-mails.

MailScanner uses spamassassin to fight spam and you can configure clam
anti-virus to check the e-mail for viruses. You can google for the
solution and you will get the right documentation to configure it.
Once you have it in your Unix box - you can use another tool called
MailWatch to monitor the e-mails flowing thru your box from your Web
browser.

P.S
Ensure you configure spamassassin with the Bayesian filtering enabled -
that enables it to autolearn the spam trends.

Rgds.

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of Nick Duda
Sent: Friday, July 20, 2007 3:26 AM
To: tony barry; Security Basics Forum
Subject: RE: New Spam Technique

Anything is always possible related to payloads and malware....thats a
given.

Your dealing with pretty muchall of us are dealing with, I'd like to
know what others are doing to combat this. We use PDF via email lots,
and for me to block it would be bad. For me to Qtine it would be bad,
even with somethign like and EUQ solution.

PDF sizes vary, so blocking based on size is hard. My employees are
starting to complain about this, and I can't figure out a solution that
is rock hard to block the bad and pass the good.

What are others doing? We get hundred of these a day, if not more!

________________________________

From: listbounce@xxxxxxxxxxxxxxxxx on behalf of tony barry
Sent: Thu 7/19/2007 3:04 PM
To: Security Basics Forum
Subject: New Spam Technique



Hi List,

We operate several mail servers with catch all accounts and have noticed
a lot of Mailer Daemon 'delivery failed messages mails from genuine
sites (mostly German)arriving recently. It would seem the spammers are
sending out e-mails with a PDF attachment and a forged senders address
to bogus recipients at these organizations whose mail server rejects the
message and sends notification to the forged sender. We have opened one
attachment on an isolated machine and it was one of the 'watch these
stocks they're going through the roof messages (not exactly sure of the
details as my German is a bit rusty). My concern is that there could be
a 'payload' embedded in the PDF. Is this possible?


--
The Simple Server Company
PO Box 51528
Pakuranga
Auckland

021 413642 09 5768552

http://www.simpleserverco.com <http://www.simpleserverco.com/>

This e-mail and any attached files transmitted with it are confidential
and intended solely for the use of the addressees. If you have recieved
this e-mail in error please inform the sender by sending a reply and
delete this message.

Relevant Pages

  • Re: Problem opening PDF attachments - Entourage
    ... Thanks for that, I've tried saving to the hard disk, files still won't ... I've also troed e-mailing myself a known-openable PDF, ... :> attachments to e-mails, either using Adobe Reader 7.0.5 or Preview. ...
    (uk.comp.sys.mac)
  • Re: best practice outlook large mail box
    ... One solutionis to use adobe pdf maker to create a pdf of your archived ... It produces an indexed pdf document by subject author and date I believe. ... archiving puts the PST on my computer)... ... searching all past e-mails, etc...i have over 20,000 e-mails in my ...
    (microsoft.public.windows.server.sbs)
  • Error opening PDF attachment...
    ... when I receive e-mails with PDF attachment and try to open it, ... - The PDF is created using export function in Seagate Crystal Report; ... I create 3 e-mail with different attachment format for the same pdf: MIME, ...
    (microsoft.public.outlook.general)
  • How Do I Print Everything in an E-mail Folder?
    ... I'd like to create a PDF file of them all (either ... Looking at Entourage, ... me select a single e-mail for printing-not a whole folder. ... some of the e-mails have photos attached or included within the ...
    (microsoft.public.mac.office.entourage)
  • Re: stupid spamassassin tricks
    ... > slugging through an awkward issue with spamassassin on my home server. ... > I am using fetchmail to get mail from my ISP - who in essence, ... Why not just use procmail as the means to filter your e-mail. ... This sets the proper header in the e-mails and I then use my mail app ...
    (Fedora)