Hi Martin,
> -----Original Message-----
> From: Martin Radford
> At Fri Aug 29 20:36:31 2003, Larry Gilson wrote:
> >
> > Hi Carlo and Martin,
> >
> > I was wondering I could ask a huge favor of you both. Could you
> > search your spam and ham history to see if there is a good
> > correlation between the Message-Id and Received line. I would
> > like to do this myself but all my messages are in Exchange.
> >
> > I was thinking of something like:
> > $test =~ /Message-Id:.*@/\.*$/i && /Received: from $MATCH/
>
> Just to confirm - essentially you mean, "take the 'host'
> token from the message-id, and check to see if that token
> appears in the 'from host' part of the Received headers".
Yes, in whatever format it happens to be.
> i.e.
>
> Message-ID: <[EMAIL PROTECTED]>
> Received: from myhost
>
> would be a "yes".
Correct.
> and
>
> Message-ID: <[EMAIL PROTECTED]>
> Received: from myhost.com
>
> would be a "no".
This one intrigues me but I can not say that I have ever come across this
construct. Have you? After thinking about it, maybe I should be more
liberal and say that this situation would be a yes. Let's do it like this:
Message-ID: <[EMAIL PROTECTED]>
Received:.*myhost.*$
Or to look at a real but altered example:
Received: from [IPADDR] (helo=foo)
by mailfilter2.mecnet.net with smtp (Exim 4.12)
id 19sifQ-00087T-00; Fri, 29 Aug 2003 08:47:52 -0400
Message-ID: <[EMAIL PROTECTED]>
This would be a yes also. Of all the Message-Id's I've been looking at, if
there is a match then the host format will be mirrored in the Received line.
> I'll see what I can do, but I'm pretty busy this weekend.
Thanks! I appreciate your effort in whatever fits your schedule.
--Larry
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
