header X_ADVERT X-Advertisement =~ /./ describe X_ADVERT X-Advertisement header exists
header X_AUTH_WARNING X-Authentication-Warning =~ /./ describe X_AUTH_WARNING X-Authentication-Warning header exists header DATE_WARNING Date-warning =~ /./ describe DATE_WARNING Date-warning header exists header ORGANIZATION Organization =~ /./ describe ORGANIZATION Organization header exists score X_ADVERT 7.0 score X_AUTH_WARNING 3.0 score DATE_WARNING 3.0 score ORGANIZATION -3.0 -------- One of the spam archives I was looking through had a lot of messages with "X-Advertisement" in their header, which would be a sure sign of spam. Don't know if any spamming software still uses this, so it might be useless now. X-Authentication-Warning and Date-warning came up in some of the messages from the archive, and has shown up in one of the spams I received recently. Seems like good things to look for. The "Organization:" header appears in very few spams, so it'd probably be a good thing to filter on. -- http://dmoz.org | Give a man a match, and he'll be warm for a | minute, but light him on fire, and he'll be The world's largest human edited | warm for the rest of his life. edited web directory directory | ICQ: 132152059 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
