Hey Mike,
> -----Original Message-----
> From: Mike Kuentz (2
> Good call, I'm sorry I missed that. What a shame, I was
> hoping I was on to something, if nothing other than
> solidifying the MSGID_GOOD_EXCHANGE rule. Oh well, back to
> the drawing board!
>
> Mike
I am curious, does MSGID_GOOD_EXCHANGE even work? I see the test in
20_compensate.cf. The match is as follows:
Message-Id =~ /^<[EMAIL PROTECTED]>$/
However, most Exchange Message-Ids I see are in the form of:
Message-ID: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
The match seems like it should be more like:
Message-Id =~ /^<[A-Z0-9]{36,[EMAIL PROTECTED]>$/
You could create your own meta rules. The following are possible examples.
Exchange 5.5
Received =~ /by.*with Internet Mail Service \(5\.5\.\d{4}\.d{2}\)/ Exchange
2K/2K3
X-MimeOLE =~ /Produced By Microsoft Exchange V6\.5\.\d{4}\.d{2}/
You have to ask yourself in the end though if these tests really help
identify a legitimate message.
--Larry
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
