WebTent wrote:
> I have a few PDF's getting through now after doing pretty good, the
> latest 0.4 pdfinfo + sa 3.1.7 + sare rules + sa-update is not scoring
> enough on these:
>
>


Current version is v0.6. And sigs for those were added last
Thursday...

> http://esmtp.webtent.net/mail1.txt
>


* 0.6 GMD_PDF_ENCRYPTED BODY: Attached PDF is encrypted
* 2.0 GMD_PDF_FUZZY2_T11 BODY: Fuzzy tags Match
* 5A4CB7600371063164BB7AFA6EDE7FE9
* 0.2 GMD_PDF_EMPTY_BODY BODY: Attached PDF with empty message body
* 3.0 GMD_PDF_STOX_M4 PDF Stox spam

> http://esmtp.webtent.net/mail2.txt
>
>

* 2.0 GMD_PDF_FUZZY2_T9 BODY: Fuzzy tags Match
* 875C8F0810E6524EF0C3A7C4221A4C28
* 0.6 GMD_PDF_ENCRYPTED BODY: Attached PDF is encrypted
* 0.2 GMD_PDF_EMPTY_BODY BODY: Attached PDF with empty message body
* 3.0 GMD_PDF_STOX_M4 PDF Stox spam

--
Dallas Engelken
dallase@uribl.com
http://uribl.com