Message-ID is a tricky booger :) I've never read anything on it, I've only made assumptions from looking at 1000's of them. There are some blatant fake ones. I've written some rules on these, and they will be in the next update. I may have already posted them to this list.
I believe this one rule was for a specific spammer. I also think that your MX showing up in the MessageID is ok. I think if it is missing, your own MTA puts it in. I could be completely wrong, as I've never read anything to that fact. HTH --Chris (top posting fool) Santerre > -----Original Message----- > From: Covington, Chris [mailto:[EMAIL PROTECTED] > Sent: Friday, October 10, 2003 11:23 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] correlation between message ID and spam > > > Is there any spam correlation between a message using a > Message-ID from > my own domain vs. its own Message-ID? I've noticed some in my corpus > uses my MX's Message-IDs vs. their own. > > I also saw this rule on Chris Santerre's website: > > header MY_MSGID_MX01 Message-ID =~ /\.mx01\.com/i > score MY_MSGID_MX01 9.000 > describe MY_MSGID_MX01 The Message-ID identifies MX01 > > thanks > Chris > > ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
