This has probably been considered before, but I thought I'd ask, since I'm
still relatively new to SA. Should there be a test for domains from which
lots of spam tends to originate? I know about the forged hotmail received
rules. I seem to get lots of Portuguese spam which originates in Brazilian
domains (at least they appear in the Received: headers). Here are the
headers from one:
Return-Path: <[EMAIL PROTECTED]>
Received: from terra.com.br ([210.21.102.67])
by manatee.mojam.com (8.12.1/8.12.1) with SMTP id g663STTB024005
for <[EMAIL PROTECTED]>; Fri, 5 Jul 2002 22:28:31 -0500
Message-Id: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
X-Spam-Status: No, hits=0.7 required=4.8
tests=FORGED_HOTMAIL_RCVD,MSG_ID_ADDED_BY_MTA_3
version=2.30
X-Spam-Level:
From: "Fabiana Souza" <[EMAIL PROTECTED]>
To: "[EMAIL PROTECTED]"@manatee.mojam.com
Subject: Tá no ar...
Date: Wed, 19 Jun 2002 20:57:26 -0300
Do people have local rules to deal with this sort of stuff?
--
Skip Montanaro
[EMAIL PROTECTED]
consulting: http://manatee.mojam.com/~skip/resume.html
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Oh, it's good to be a geek.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
