[SAtalk] A new test idea

[Mike Batchelor]

Sendmail and many other MTAs (not qmail though) add a Message-Id header if a message it handles does not have one. The only messages I see that lack Message-Id are direct-to-MX spam from shoddy malware. Messages that are sent normally by regular folks will have a Message-Id by the time it arrives at the destination. I think this would be a useful rule, since you can easily identify a Message-Id that was added by your own MTA (it has your domain in it). Pseudo-code would go something like this:

if (Message-Id contains mydomain && (From|EnvelopeSender) contains foreigndomain) {
Spamscore += 1.5
}

What do you think? This would not work on a sendmail/MIMEdefang/SA setup, since sendmail doesn't get to add the Message-Id until after the Milter has had a go at the message. But for people using SA via .forward, this should work pretty well.

---
"The avalanche has already begun. It is too late for the pebbles to vote."
-- Kosh


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk