Hi All, I tend to see a lot of spam with message IDs like: Message-ID: <[EMAIL PROTECTED]>
The message that contained the above message ID hit the following tests: X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) X-Spam-Report: ---- Start SpamAssassin results 5.40 points, 7 required; * 0.3 -- URI: URL of page called "remove" * 0.9 -- Date: is 3 to 6 hours after Received: date * 0.5 -- RBL: Received via a relay in unconfirmed.dsbl.org [RBL check: found 178.234.179.200.unconfirmed.dsbl.org.] * 0.5 -- Message has X-MSMail-Priority, but no X-MimeOLE * 2.6 -- Forged mail pretending to be from AOL * 0.6 -- Message looks like Outlook, but isn't ---- End of SpamAssassin results Is it reasonable to assume that a message ID that is not in the form of @some.domain is probably spam. If I remember correctly, there is no real restriction on message IDs. In reality, does anyone know of legitimate MUAs or MTAs that do not form message IDs as @some.domain? I don't see a test for missing hostname. Does that test for FQDN format of the host or a message ID that is truncated after the @ symbol? Regards, --Larry ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
