On Tue, Jan 07, 2003 at 05:39:43AM +0100, Maxime Ritter wrote:
> Can someone explain me what these headers are meaning :
> X-Spam-Warning: SpamAssassin ( http://www.spamassassin.org/ ) says this message is
>SPAM
> X-Spam-Score: 10.2 (**)
>
> X-Scanned-By: MIMEDefang 2.15 (www dot roaringp
Mailing-List: gives a false-positive for me on the google-friend mailing list,
The ant developers list (apache/jakarta), and a couple others. Looks like ezmlm
inserts it, since many of the lines say "run by exmlm" at the end.
I get a lot of X-EM-Version and X-EM-Registration as well, looks like
Hi,
To clarify, I searched 50K messages for -i stormpost, not the regex below.
Regards,
Rick
- Original Message -
From: "Daniel Quinlan" <[EMAIL PROTECTED]>
To: "Brian May" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Friday, May 31, 2002
Bart Schaefer writes:
> X-Em-* appears in newsletter mailings from at least a couple of legitimate
> organizations, such as (IIRC) the Million Mom March.
>
> As such it might be worth scoring, but scoring separately.
I suppose the Million Mom March is legitimate.
Anyway, I just found a legitima
On Fri, 31 May 2002, Daniel Quinlan wrote:
> Some of these headers seem innocuous, so I'm a tad nervous about
> checking it in, but I've checked a lot of legitimate email without
> finding any matches.
X-Em-* appears in newsletter mailings from at least a couple of legitimate
organizations, such
Brian May writes:
> Has anyone seen this header before? Google had no matches.
>
> X-Stormpost-To:
>
> It was one of the headers of spam that got through...
Yep. It's from Stormpost which appears to be a spam program. There's
probably a "X-Mailer: StormPost 1.0" header in your message too.
I added StormPost to my local list of RATWARE (I trimmed down
RATWARE some, and gave it a manual positive score), on May 1,
and it has resulted in zero false positives, and has caught (I think)
every copy of the "Joke of the Day" (etc.) spam since then.
There was a discussion about this, and abou
On Fri, 2002-05-31 at 15:37, Brian May wrote:
> Has anyone seen this header before? Google had no matches.
>
> X-Stormpost-To:
If you try a google search for 'stormpost spam' you'll find that there
are people who consider StormPost spamware and block mail with
X-Stormpost and X-Mailer: StormPo
