though:
* 2.9 -- BODY: Message seems to contain obscured email address (rot13)
I'm seeing some occurrences of it in the headers, too, though I don't see
any mention of any header rule hits. As for the reversed domain name, I
found none in 3 months worth of spam.
Yorkshire> I h
o: or Cc: line
headerANCIENT_RCPT ToCc =~ /(joeuser1|joeuser2|joeuser3)/i
describe ANCIENT_RCPT LOCAL: Long-departed user ID in addressee list
score ANCIENT_RCPT 4.0
--
Mike Scheidler[EMAIL PROT
much the same way as the
other black/white lists.
Thoughts?
--
Mike Scheidler
---
This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_
ere's no reason that they
couldn't be random in some future incarnation.
--
Mike Scheidler[EMAIL PROTECTED]
Unix Administration & Server Operations/Kokomo Administration Team
Delphi Automotive Systems - IS&S
;m not at all familiar with these. Again, something for me to look at.
Thanks for the feedback. You've given me some ideas. I was hoping someone
would post a sendmail rule set to do special handling depending on the
'X-Spam-Status:' header, but maybe that's a h
ere perhaps a
better approach?
--
Mike Scheidler[EMAIL PROTECTED]
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassass