Re: [SAtalk] PowerMail, PowerMTA, was (Grr, another one!) http://sourceforge.net/mailarchive/message.php?msg_id=6199187 http://article.gmane.org/gmane.mail.spam.spamassassin.general/31476 http://marc.theaimsgroup.com/?l=spamassassin-talk&m=106521332813096&w=2
Jonathan Nichols <[EMAIL PROTECTED]> wrote on 2003-10-03 13:10: ... > Check this out. Here's a header from a common type of spam that slips > through. PowerMTA is *always* the MTA, PowerMail is always the X-Mailer, > and it's jnichols@(fake domain) for > the "from" address. <SNIP> > And here's an example header....: <SNIP> > Received: by gc13.meganewz.com (PowerMTA(TM) v2.0c1); Fri, > 3 Oct 2003 14:40:39 -0400 (envelope-from <[EMAIL PROTECTED]>) > X-Mailer: PowerMail v8855789 <SNIP> Something like?: header JN_PowerMTA_031003 Received =~ /.*PowerMTA.*/i describe JN_PowerMTA_031003 PowerMTA in Received Header score JN_PowerMTA_031003 3 header JN_PowerMail_031003 X-Mailer =~ /.*PowerMail.*/i describe JN_PowerMail_031003 PowerMail in X-Mailer Header score JN_PowerMail_031003 3 [EMAIL PROTECTED] ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
