Full Disclosure mailing list archives

RE: SPAM with a PGP signature?


From: "Schmehl, Paul L" <pauls () utdallas edu>
Date: Mon, 21 Jul 2003 16:28:58 -0500

Yes, spamassassin is infinitely configurable, and you can assign either
"negative" or "positive" points to PGP sigs.  You could also add a
filter for the specific sig that is being used and reused and assign it
enough points to can the spam based on that alone.  Or, as you ask, you
could just have sa ignore PGP sigs entirely.  Your choice.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 
-----Original Message-----
From: Joshua Thomas [mailto:JThomas () poweronemedia com] 
Sent: Monday, July 21, 2003 2:53 PM
To: full-disclosure () lists netsys com
Subject: RE: [Full-disclosure] SPAM with a PGP signature?


Sounds good for you. 
Sounds lame if you have to filter spam for a hundred people. 
Back on topic, can't you override SpamAssassin and tell it to ignore PGP
sigs when computing the spam probability? 
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: