On Sun, 2003-12-07 at 01:28, Robert Nicholson wrote: > I've got a mailbox full of messages that got past SA > > They are all from the same spammer. >
SNIP!! > All of these scored less the 0.6 hits > > I've posted abbreviated headers for brevity. > > Do we have a way of dealing with the spammer who's Reply-To's always > look the same? > > Is Bayes the only way of handling these? > I would actually research the domains. I bet that if you use dig and www.arin.net, you'll find that they all go to the same net block. I would then either write a rule for that net block, or talk to your firewall guys about blocking that range. -- AltGrendel <[EMAIL PROTECTED]> ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
