Is this ever possible to be legit? See the received domain of zzn.com and
the user agent at the bottom of AOL 7. Seems to me this is a sure fire spam
tag.
Received: from beatle.zzn.com ([61.171.144.236])
by moglobal.com (8.12.5/8.12.5) with SMTP id h759N1Fu021390
for <[EMAIL PROTE
On Wed, 2003-08-06 at 18:59, Larry Gilson wrote:
> After studying AOL headers, as well as other ISPs, I have added a header
> check after SA via Procmail. Below is my check:
>
> #
> AOL
> #
>
> :0
> * ^(X-Merlin-MailFrom|From):.*aol\.com
> {
>:0 fw
>* 1^0 !^Received: [EMAIL PROTECT
> I don't get mail from AOL users, so I can't check the headers of
> legitimate AOL messages. Are there any versions of the AOL software
> that use User-Agent instead of X-Mailer?
I used to run the mail development team there... the headers are added by
the AOL server software, not the client its
After studying AOL headers, as well as other ISPs, I have added a header
check after SA via Procmail. Below is my check:
#
AOL
#
:0
* ^(X-Merlin-MailFrom|From):.*aol\.com
{
:0 fw
* 1^0 !^Received: [EMAIL PROTECTED]
* 1^0 !.*by imo.*\.mx\.aol\.com
* 1^0 !^Message-ID:[EMAIL PROTE
> -Original Message-
> From: Yorkshire Dave
> On Wed, 2003-08-06 at 18:59, Larry Gilson wrote:
> >After studying AOL headers, as well as other ISPs, I have added
> >a header check after SA via Procmail. Below is my check:
> Why don't you add the header in procmail before SA, and write
At Wed Aug 6 17:07:54 2003, Chris Santerre wrote:
>
> Is this ever possible to be legit? See the received domain of zzn.com and
> the user agent at the bottom of AOL 7. Seems to me this is a sure fire spam
> tag.
>
> Message-ID: <[EMAIL PROTECTED]>
> ...
> User-Agent: AOL 7.0 for Windows US sub
Services, Inc.
- Original Message -
From: "Martin Radford" <[EMAIL PROTECTED]>
To: "Chris Santerre" <[EMAIL PROTECTED]>
Cc: ""Spamassassin-Talk (E-mail)"" <[EMAIL PROTECTED]>
Sent: Wednesday, August 06, 2003 4:22 PM
Subject: Re: [SAtal
