Mailing-List: gives a false-positive for me on the google-friend mailing list, The ant developers list (apache/jakarta), and a couple others. Looks like ezmlm inserts it, since many of the lines say "run by exmlm" at the end.
I get a lot of X-EM-Version and X-EM-Registration as well, looks like it's some MUA distributed to Earthlink users at somepoint. EM seems to stand for "Earthlink MailBox" I had a couple hits on the other rules, but it actually turns out they were all misfiled spam! I would remove the X-EM and the mailing-list and check the rule in. We'll see how the GA likes it. C Daniel Quinlan wrote: DQ> Brian May writes: DQ> DQ> > Has anyone seen this header before? Google had no matches. DQ> > DQ> > X-Stormpost-To: <emailaddy> <numbers, possibly web bugs> DQ> > DQ> > It was one of the headers of spam that got through... DQ> DQ> Yep. It's from Stormpost which appears to be a spam program. There's DQ> probably a "X-Mailer: StormPost 1.0" header in your message too. DQ> DQ> I'm currently testing a RATWARE_HEADER rule. These are the most DQ> frequent headers I have found in spam, but never found in non-spam. DQ> Some of these headers seem innocuous, so I'm a tad nervous about DQ> checking it in, but I've checked a lot of legitimate email without DQ> finding any matches. DQ> DQ> header RATWARE_HEADER ALL =~ /\n(?:mailing-list|x-em-registration|x-em-version|x-esmtp|x-list-host|x-list-unsubscribe|x-message-id|x-precedence-ref|x-smtpexp-registration|x-smtpexp-version|x-stormpost-to|x-x):/is DQ> describe RATWARE_HEADER Bulk email software header DQ> DQ> Dan DQ> DQ> _______________________________________________________________ DQ> DQ> Don't miss the 2002 Sprint PCS Application Developer's Conference DQ> August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm DQ> DQ> _______________________________________________ DQ> Spamassassin-talk mailing list DQ> [EMAIL PROTECTED] DQ> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk DQ> DQ> DQ> _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
