On Tue, 15 Jul 2003, Simon Byrnand wrote:
> >I had several spams not too long ago in which all of them used the same
> >Message-ID. SA refused to learn from any of them except the first one.
> >What can be done to combat that? Of course, duplicate Message-ID's are
> >a violation of RFC's, but spammers don't care. :)
>
> I've wondered that before too.....but been afraid to voice it on the list
> in case spammers pick up on it.... but now that you've mentioned it.....:)
>
> What happens if all spammers start sharing a handfull of message ID's, will
> that make Bayes useless against trying to learn their messages ? Good
> question indeed...
>
> Regards,
> Simon
No problem, just take a page out of the UseNet News server book.
Duplicate messages are rejected (well in the case of News, just dropped
on the floor ;).
In the News world, the Message-ID -is- the message ID, and a duplicate
ID == duplicate message and thus droppable.
For the e-mail world, it'd be nice to reject 'duplicate messages'
rather than just dropping them, but I'd have no trouble with doing
that. (Heck, they -are- intentionally violating the RFC, so treat
it as an intentional effort to defraud ;).
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
-------------------------------------------------------
This SF.Net email sponsored by: Parasoft
Error proof Web apps, automate testing & more.
Download & eval WebKing and get a free book.
www.parasoft.com/bulletproofapps1
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
