> -----Original Message-----
> From: Bart Schaefer [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 22, 2003 9:04 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [SAtalk] [RD] Freshmeat for rules
> 
> 
> On Fri, 22 Aug 2003, Chris Santerre wrote:
> 
> > opps sorry, this was typoed by my big fingers:
> > 
> > header MY_HEADER_TAG6 List-Unsubscribe =~ /^\<mailto\:.?\>/i
> > 
> > Ahhhhh that's better :-)
> 
> Er, that's a standard RFC2369 mailing list header, which the RFC 
> recommends should contain a mailto: URL.  Why are you tagging it?
> 
> 

Ahhhhh grasshopper......because it is empty! :-) 

Notice the \>/i ? 

It simply contains "<mailto: >"
I believe the spammer is trying to hit negative rule by haveing the
List-Unsubscribe header. If anyone finds a large number of ham with this, I
would love to know. So far, only spam.

-- Chris Santerre
 


-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to