At Tue Jan 14 22:34:34 2003, Andrew Joakimsen wrote: > > Also I just had a thought, does SA add any (alot) of points if it detects it > as two mailers (say a spammer trying to get his message past SA)?
There's a whole set of rules in the 2.50 CVS version which compare the format of the message-id with what you'd expect given the X-Mailer or User-Agent header. So, if your message claims it was sent with (say) Netscape, but the message-id is not in the format that Netscape uses, then it'll trigger the FORGED_MUA_MOZILLA rule. I have seen messages claiming to be sent both with Mutt (which uses the "User-Agent" header), and (I think) Outlook (X-Mailer). In this case, the Message-ID will match for one but not the other, and hence will trigger at least one of the FORGED_MUA_* rules. What score the GA will assign to these rules is yet to be seen :-) Martin -- Martin Radford | "Only wimps use tape backup: _real_ [EMAIL PROTECTED] | men just upload their important stuff -o) Registered Linux user #9257 | on ftp and let the rest of the world /\\ - see http://counter.li.org | mirror it ;)" - Linus Torvalds _\_V ------------------------------------------------------- This SF.NET email is sponsored by: Take your first step towards giving your online business a competitive advantage. Test-drive a Thawte SSL certificate - our easy online guide will show you how. Click here to get started: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0027en _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
