On Fri, Mar 14, 2003 at 11:59:44AM -0500, Matt Kettler wrote:
> Quite frankly, I'd avoid that though.. many viruses pretend to be bounce 
> messages to try to get the user to read them. I wouldn't be surprised to 
> see spammers generating fake bounce messages as spam.

I agree you don't want to have a generic "it's from postmaster@"
nice rule.  Too easy to forge.

FYI, there are 3 (from what I can tell) rules for this kind of stuff,
although two of them were GA disabled (too few hits it looks like):

STATISTICS-set3.txt:  0.077   0.0047   0.1318    0.035   0.84    0.00  FAILURE_NOTICE_2
STATISTICS-set3.txt:  0.209   0.0174   0.3534    0.047   0.81   -2.60  MAILER_DAEMON
STATISTICS-set3.txt:  0.052   0.0063   0.0863    0.068   0.76    0.00  FAILURE_NOTICE_1

-- 
Randomly Generated Tagline:
"True hackers don't die, their ttl expires" - Unknown

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to