Re: [SAtalk] This should go to the sightings list, but it brings up

2002-10-30 Thread Martin Radford
At Wed Oct 30 18:37:32 2002, Jan Korger wrote: > > On Wed, 30 Oct 2002, Tim Helton wrote: > > > score USER_AGENT_OE -0.3 > > score USER_AGENT_MUTT-4.109 > > score USER_AGENT -1.143 > > > > > > Maybe it would be beneficial to see if more than 1

Re: [SAtalk] This should go to the sightings list, but it brings up an important flaw

2002-10-30 Thread Theo Van Dinter
On Wed, Oct 30, 2002 at 01:49:26PM -0500, Matt Kettler wrote: > Another simple rule would be to detect emails which have both an X-Mailer > and a User-Agents header. The OE rule actually detects an X-Mailer header, > so the mail you got would have had to have both headers. FYI: we've been workin

Re: [SAtalk] This should go to the sightings list, but it brings up an important flaw

2002-10-30 Thread Matt Kettler
I wrote: Another aspect of this flaw is the heavy positive weights posessed by some mailers. This is easily added to a spam mail for bonus points, so I tend to view any USER_AGENT rule with a score less than -2 as being highly questionable, making an easy target for spam white listing. To fur

Re: [SAtalk] This should go to the sightings list, but it brings up an important flaw

2002-10-30 Thread Matt Kettler
Another simple rule would be to detect emails which have both an X-Mailer and a User-Agents header. The OE rule actually detects an X-Mailer header, so the mail you got would have had to have both headers. I did a casual search of my emails and didn't find any (spam or nonspam) with both, so th