Spam Filter ISP Forums : PDF Spam https://www.logsat.com/spamfilter/forums/ Fri, 12 Jun 2026 20:07:55 +0000 Thu, 26 Jul 2007 23:45:15 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=6125 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[PDF Spam : Thermo,We received the PDF file....]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10564&title=pdf-spam#10564 Author: LogSat
Subject: 6125
Posted: 26 July 2007 at 11:45pm

Thermo,

We received the PDF file. Yes, even if they are encrypted, they are still being scanned successfully. I will email you with additional details.
]]> Thu, 26 Jul 2007 23:45:15 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10564&title=pdf-spam#10564 <![CDATA[PDF Spam : I sent you an email with the pdf...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10562&title=pdf-spam#10562 Author: Thermo
Subject: 6125
Posted: 26 July 2007 at 10:15pm

I sent you an email with the pdf attached, this pdf has 128 bit encryption enabled per the document properties in Adobe reader.

Thermo
]]> Thu, 26 Jul 2007 22:15:41 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10562&title=pdf-spam#10562 <![CDATA[PDF Spam : If you can forward us a copy of...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10560&title=pdf-spam#10560 Author: LogSat
Subject: 6125
Posted: 26 July 2007 at 8:32pm

If you can forward us a copy of one such email we'll be able to find out more.]]> Thu, 26 Jul 2007 20:32:48 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10560&title=pdf-spam#10560 <![CDATA[PDF Spam : The pdf spam coming in to me contain...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10556&title=pdf-spam#10556 Author: Thermo
Subject: 6125
Posted: 26 July 2007 at 5:56pm

The pdf spam coming in to me contain encrypted text based pdf's with full security turned on. Are these still being scanned, and can you even scan these for keywords?

Thermo
]]> Thu, 26 Jul 2007 17:56:34 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10556&title=pdf-spam#10556 <![CDATA[PDF Spam : Got the sample. The issue is that...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10474&title=pdf-spam#10474 Author: LogSat
Subject: 6125
Posted: 16 July 2007 at 12:00pm

Got the sample. The issue is that the filter we've lately developed scans for *images* within PDF files, and then applies our current image filter to them to see if they're spam. In the sample provided (we've seen several ourselves), the PDF contains *text*, not images. We'll be releasing a new version shortly that will allow you to scan PDFs as well for keywords, in addition to the email's body.]]> Mon, 16 Jul 2007 12:00:29 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10474&title=pdf-spam#10474 <![CDATA[PDF Spam : I have many samples as well that...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10473&title=pdf-spam#10473 Author: IKILLSPAM1
Subject: 6125
Posted: 16 July 2007 at 11:51am

I have many samples as well that I can contribute :)]]> Mon, 16 Jul 2007 11:51:17 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10473&title=pdf-spam#10473 <![CDATA[PDF Spam : OK ... I am finding it is catching...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10472&title=pdf-spam#10472 Author: Desperado
Subject: 6125
Posted: 16 July 2007 at 11:35am

OK ... I am finding it is catching as many as it has been catching but suddenly some new ones are getting through.  I am thinking it is the dimentions of the image but am not sure.  I emailed support prior to seeing this post and have a pdf sample ready for roberto to look at if he thinks it will do any good.]]> Mon, 16 Jul 2007 11:35:34 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10472&title=pdf-spam#10472 <![CDATA[PDF Spam : Has anyone noticed a drop off...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10471&title=pdf-spam#10471 Author: IKILLSPAM1
Subject: 6125
Posted: 16 July 2007 at 10:42am

Has anyone noticed a drop off on the effectiveness of this? I was catching like 25 a day and now its not catching any. Why is that? I also notice in the log it says Scanning PDF for spam:    with no filename after it. Im guessing all those are definately spam.

Is there anything I can do about these? Any suggestions are welcome.

 

]]> Mon, 16 Jul 2007 10:42:53 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10471&title=pdf-spam#10471 <![CDATA[PDF Spam : Roberto, the new pdf-scanning...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10442&title=pdf-spam#10442 Author: sgeorge
Subject: 6125
Posted: 06 July 2007 at 10:50am

Roberto, the new pdf-scanning functionality is working like a peach!  I am extremely pleased (and so are our users). 

Stephen
]]> Fri, 06 Jul 2007 10:50:02 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10442&title=pdf-spam#10442 <![CDATA[PDF Spam : Desperado,We&#039;ve just released...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10410&title=pdf-spam#10410 Author: LogSat
Subject: 6125
Posted: 30 June 2007 at 11:37pm

Desperado,

We've just released SpamFilter v3.5.4.692 in the registered user area. It is a beta that is able to scan within PDF files and is successfully identifying the "stock spam" embedded in them. This new filter is enabled by default and inherits the same settings as the "standard" image filter.

Please note that this new release also includes several major internal improvements and bug fixes. In addition to the new PDF filter, the most notable change involves a bug we discovered with all the triggers in the database (see release notes below). To fix it, SpamFilter will automatically delete ALL triggers and recreate them when it is started for the first time.


// New to VersionNumber = '3.5.4.692';
{TODO -cNew : Added new filter to scan images within PDF attachments for spam}
{TODO -cFix : In SFE, triggers in the database were not identifying multiple updates to the same tables, if they occurred within 5 seconds of each other. A DB patch SQL script will be automatically downloaded and executed once by SpamFilter upon startup. The script will delete all triggers and recreate them}
{TODO -cFix : In installations with multiple SpamFilter Enterprise, changes made directly against the database may not be visible by other servers}
{TODO -cFix : A specific set of circusmtances involving "unfiltered Emails" with the "tag" or "tagsubject" modifiers, and multiple, separate emails within the same SMTP session, could cause emails to be delivered to some unfiltered users if a recipient is in the unfiltered list}
{TODO -cFix : Exception occurred during TFilterObject.ReadFilterFromFile (2): Access violation at address 00401981 in module 'SpamFilterSvc.exe'.}
{TODO -cFix : SpamFilter Enteprise GUI *appeared* frozen during startup when processing several customized domain. The ativity windows now scrolls to show current status during startup}
{TODO -cNew : When adding duplicate entries in the blacklist/whitelists, SpamFilter will automatically remove the duplicate from the database as well, not just in the GUI as before (except for MAPS and Keywords blacklists)}



Edited by LogSat]]> Sat, 30 Jun 2007 23:37:19 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6125&PID=10410&title=pdf-spam#10410