Re: X-message-flag question

2004-10-12 Thread Ian FREISLICH
Jeremy Rumpf wrote: > I've seen a few messages recently that contained the header > > X-message-flag: Authentic Sender, Hash: PoHgCaAr I thought X-message-flag was used by microsoft outlook to populate a highlighted part of the header when viewing the message. There was also no way to turn it of

Re: X-message-flag question

2004-10-11 Thread Loren Wilton
> So the initial rule will concentrate on the syntax format instead of just > checking for the existence of the header: > > X-message-flag: Authentic Sender, Hash: TrVfLjGp This one appears to me to be bogus as well, it comes from the same guy: > X-message-flag: Encrypted 128 bit message, authe

Re: X-message-flag question

2004-10-11 Thread Loren Wilton
BTW, all of these *claim* to be from X-Mailer: Microsoft Office Outlook, Build 11.0.6353 However, they also happen to all be from a particular spammer in Brasil, and most of them also claim to have been scanned by SA 2.60 and got a score of -5.1. So I don't know that I necessarily believe the X-

Re: X-message-flag question

2004-10-11 Thread Loren Wilton
> > Has anyone seen these headers? Perhaps AOL? > \\It\wilton\train\TestSpam(6797):X-message-flag: Authentic Sender, Hash: RdDyHlGm \\It\wilton\train\TestSpam(11091):X-message-flag: Authentic Sender, Hash: VuIkTsDi \\It\wilton\train\TestSpam(18445):X-message-flag: Encrypted 128 bit message, authe

Re: X-message-flag question

2004-10-11 Thread Jeremy Rumpf
On Monday 11 October 2004 12:43 pm, Justin Mason wrote: > Jeremy Rumpf writes: > > I've seen a few messages recently that contained the header > > > > X-message-flag: Authentic Sender, Hash: PoHgCaAr > > > > My questions are, are they trying to simulate something like hash cash? > > Does anyone kno

Re: X-message-flag question

2004-10-11 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeremy Rumpf writes: > I've seen a few messages recently that contained the header > > X-message-flag: Authentic Sender, Hash: PoHgCaAr > > My questions are, are they trying to simulate something like hash cash? Does > anyone know of a MUA that ins

X-message-flag question

2004-10-11 Thread Jeremy Rumpf
I've seen a few messages recently that contained the header X-message-flag: Authentic Sender, Hash: PoHgCaAr My questions are, are they trying to simulate something like hash cash? Does anyone know of a MUA that inserts/utilizes this header? I would like to insert a local rule to score on this