Quoting Mark <[EMAIL PROTECTED]>: > "Look at SMTP connections, and consider all IP addresses spam that, in one > session, deliver to 4 or more local recipients simultaneously."
This gave me a good idea for a test I could run in MIMEDefang. I have a small wrapper in my mimedefang-filter around the spam assassin check, and I run custom tests and alter the SA score based on these tests. I'm trying out your theory and for now just copying any message that comes from an external relay that is addressed to more than 10 recipients at once. I'm going to see what kind of stuff I catch. My guess is it will be mostly spam, as you've said. In the end I may decide to score this test at 1.5-2.0. Thanks for the idea! ___________________________________________ Michael Sims Project Analyst - Information Technology Crye-Leike Realtors Office: (901)758-5648 Pager: (901)769-3722 ___________________________________________ ------------------------------------------------------- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
