How to filter image spam with SA

xemaps

Verified User
Joined
Apr 13, 2006
Messages
385
Location
Europe
To try for text in image spam

Install ImageInfo plugin for Spamassassin ( i use exim & clamav on FC3 )

About thread link : http://mail-archives.apache.org/mod_mbox/spamassassin-users/200608.mbox/thread

# ImageInfo plugin
# download link : http://svn.apache.org/repos/asf/spamassassin/rules/trunk/sandbox/felicity/
# Download & Place 70_imageinfo.cf & ImageInfo.pm in /etc/mail/spamassassin
# add folowing line to /etc/mail/spamassassin/v310.pre
loadplugin Mail::SpamAssassin::Plugin::ImageInfo /etc/mail/spamassassin/ImageInfo.pm

restart exim

Please notice that spamassassin filter by default only <256000 Bytes messages
 
Today is a very very big increase of image spam.

i hope some people would try these easy filter for spamassassin called ImageSpam.
 
xemaps said:

# add folowing line to /etc/mail/spamassassin/v310.pre
loadplugin Mail::SpamAssassin::Plugin::ImageInfo /etc/mail/spamassassin/ImageInfo.pm


Are these to be on two seperate lines i.e

Mail::SpamAssassin::Plugin::ImageInfo
/etc/mail/spamassassin/ImageInfo.pm

Jon
 
Code:
bash: /etc/mail/spamassassin/ImageInfo.pm: Permission denied

Don't we need to chmod +x ImageInfo.pm?

Anyway, I just tested it but it doenst work for me atm.
 
Last edited:
root:root & 0644 like other files in etc/mail/spamassassin/ should be fine

and restart exim
 
I've noticed it catches most image spam.

Part of the spamassassin result:

3.0 DC_IMAGE_SPAM Possible image-only spam

Jon
 
that looks nice too... only much installing is needed and it gives problems with Red Had / Fedora... at least that is what the page says...

somebody got any experience with it?

Mike
 
The fuzzyocr is not the best plugin on my mind, it takes too much ressources/time. Take imageinfo plugin.

With imageinfo plugin i suggest you to double spam points in the .cf
I never had one spam goes through this bad 3 weeks, but my config is helped by helo/host/reverse rules aso
 
Yes had a look at the cf although it said not to edit directly and didn;t really understand the conf file. Could you suggest where to add 'double points'?

What do you add to have 'helo/host/reverse rules' ?

Thanks

Jon
 
xemaps the high resource is just what you read or from experience?

I have seen this on a few servers now and load averages barely moved.

What I do know is not a single image spam has got through.
 
I agree, load has barely moved here either with FuzzyOCR, and it's very effective.
 
i tried it 6 monthes ago !

You should try each solution and see what is better for YOUR server.
Notice that my server doesn't receive the same spam as YOURS. On mine NO spam image goes through, that mean i have MY answer for MY server. anti spam is an equation with not only one component.

Here i found a discussion you can read http://comments.gmane.org/gmane.mail.spam.spamassassin.general/89480
 
Last edited:
hopefully this works.... I have gotten an influx of spam since I upgraded to the latest version of spamassassin.

I am trying the first solution proposed in this thread.
 
Back
Top