RE: PDF Spam
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
RE: PDF Spam - 2.Jul.2007 12:32:52 PM
|
|
|
dialexia
Posts: 59
Joined: 21.Dec.2005
Status: offline
|
Sorry to join the parade, but we have been getting these pdf emails as well for the past two weeks.....HELP!
|
|
|
|
|
RE: PDF Spam - 2.Jul.2007 12:45:56 PM
|
|
|
Papabrad
Posts: 26
Joined: 3.Apr.2005
Status: offline
|
We were forced to have MailSecurity quarantine all .pdf files because of this.
|
|
|
|
|
RE: PDF Spam - 2.Jul.2007 1:01:53 PM
|
|
|
dialexia
Posts: 59
Joined: 21.Dec.2005
Status: offline
|
Mark,
When adding keywords, are quotations necessary?
Does anyone else know the anwser?
|
|
|
|
|
RE: PDF Spam - 3.Jul.2007 8:14:06 AM
|
|
|
triplet
Posts: 7
Joined: 2.Jul.2007
Status: offline
|
I have been receiving these as well.
I noticed on the last few that they are coming in as ".pdf attached". I put in keyword checking for subject as "*.pdf attached".
I will post with the results.
Mark, I did not put quotations on it, nor do I think it is necessary.
|
|
|
|
|
RE: PDF Spam - 3.Jul.2007 11:04:16 AM
|
|
|
Mark Busuttil
Posts: 4836
Joined: 16.Oct.2005
Status: offline
|
Should the actual phrase in the subject contains quotes, you will also need to add the quotes within the Keyword Checking Phrase.
Thank you!
_____________________________
Regards,
Mark Busuttil
GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software
GFI: MailEssentials - MailSecurity - MailArchiver - FAXmaker - LANguard – WebMonitor
|
|
|
|
|
RE: PDF Spam - 3.Jul.2007 4:29:24 PM
|
|
|
walterk1
Posts: 27
Joined: 19.Sep.2004
From: Atlanta, GA
Status: offline
|
We have been seeing new pdf email as well. I have sstarted to see it caught in my spam filters under SPF failures, but some keep getting through. I am going to setup keyword filter for .pdf in the subject. Hopefully, not too many real ones will be stopped. I know sometimes people will send email from Windows explorer, and the subject can contain .xls, .doc .pdf.
I will just monitor the sender names and see what happens. Luckily our internal users are the worst (or so it seems) and they are safe listed (I really do not like blacklist and whitelist - try explaining that to users....)
Walter
|
|
|
|
|
RE: PDF Spam - 5.Jul.2007 3:35:17 AM
|
|
|
Stone
Posts: 38
Joined: 18.Aug.2004
Status: offline
|
We are hit by the pdf hell as well. Hundreds of pdf spam are hitting us every day. Since we have a lot of legitime pdf files I need to be sure no ones are wrongly deleted. Today I use MailSecurity to quarantine pdf attachments, but this is not a good solution. We need help to get a solution to this, and could GFI please provide it.
-stone
|
|
|
|
|
RE: PDF Spam - 5.Jul.2007 6:14:22 AM
|
|
|
monkeyman
Posts: 52
Joined: 26.Oct.2003
Status: offline
|
Hi all,
We are also getting hammered by the pdf spam nightmare. Our systems aren't doing that much of a good job to block them so a lot is getting through to the end user. Sadly I can't really afford the time to block pdf attachments as we have a helluva lot of pdfs coming and going through our in house design/repro team.
any updates?
Eddy
|
|
|
|
|
RE: PDF Spam - 5.Jul.2007 10:27:51 AM
|
|
|
Nicks
Posts: 2741
Joined: 17.Mar.2003
Status: offline
|
Hi all,
Currently, the most effective way to block these emails is to use the NewSenders feature. This will block all emails which are coming from unknown senders, i.e. senders to which your organisation has never sent emails.
We are currently working on an update which targets this type of spam specifically. I will let you know as soon as we have more infomation.
Thank you.
_____________________________
Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software
|
|
|
|
|
RE: PDF Spam - 6.Jul.2007 10:16:19 AM
|
|
|
Hainesey
Posts: 40
Joined: 30.Jan.2006
Status: offline
|
Can't wait an update! The majority of the ones getting caught by ours are through SPF. Bayesian isn't having much luck, it's just about started to filter out stock ones!
|
|
|
|
RE: PDF Spam - 6.Jul.2007 11:14:15 AM
|
|
|
coolfactor
Posts: 29
Joined: 15.Jun.2007
Status: offline
|
I set a keyword filter to reduce the number of messages that contain the words "pdf attached" in the Subject line, since that is a common pattern we've been seeing for this type of spam. Then, at the mail server level, I created a Content Filter rule that quarantines all remaining messages with ".pdf" in the subject to a mailbox that I check manually.
So far, I've only found one good message in the past week. The rest has been entirely spam. And given that we check the quarantined messages every day, it's been quite manageable. I'm looking forward to GFI's solution, though.
|
|
|
|
|
RE: PDF Spam - 6.Jul.2007 12:03:10 PM
|
|
|
jdo
Posts: 3
Joined: 26.Jun.2007
Status: offline
|
same problem here, using a keyword filter doesn't help because the spammers started to change the subject line randomly.
greetings Jd
|
|
|
|
|
RE: PDF Spam - 9.Jul.2007 7:53:39 AM
|
|
|
ride_bent
Posts: 13
Joined: 16.Apr.2003
Status: offline
|
I love PDF Spam as much as I love image SPAM. NOT!
It is a problem here as well. We are seeing a decrease in SPAM caught. We should be running at 98-99% SPAM in the summer. This summer it is down about 5 to 6%. (We are a K-12 school and there is not much mail during the summer months.)
I hope there is a solution soon.
|
|
|
|
|
RE: PDF Spam - 9.Jul.2007 8:35:15 AM
|
|
|
coolfactor
Posts: 29
Joined: 15.Jun.2007
Status: offline
|
To re-iterate a solution that is working very well for us, we created a content filter that traps all messages with ".pdf" in the Subject line. These are sent to a special mailbox that is monitored every day. In the past 2 weeks, I've only found 1 good message in there. I simply remove ".pdf" from the Subject line and forward it along to the proper recipient. The rest are deleted.
Requires manual monitoring, but hasn't been a big deal, even with 160,000 incoming spam a day.
|
|
|
|
|
RE: PDF Spam - 9.Jul.2007 8:55:12 AM
|
|
|
ride_bent
Posts: 13
Joined: 16.Apr.2003
Status: offline
|
quote:
ORIGINAL: coolfactor
To re-iterate a solution that is working very well for us, we created a content filter that traps all messages with ".pdf" in the Subject line. These are sent to a special mailbox that is monitored every day. In the past 2 weeks, I've only found 1 good message in there. I simply remove ".pdf" from the Subject line and forward it along to the proper recipient. The rest are deleted.
Requires manual monitoring, but hasn't been a big deal, even with 160,000 incoming spam a day.
If only I had Exchange 2007/Content Filter.
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
