On 09/19/11 12:04, Bowie Bailey wrote: > > He is not trying to match the IP address. He is trying to match an > unusual way of presenting the IP address that seems to occur primarily > in spam. > > Whether this is something that should be done in ClamAV or would be > better done by something like SpamAssassin is another question altogether. >
Fair enough. I was just unhappy with the idea that "0.0.0.1" is somehow less obfuscated than "1". _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml