Hello Rich,

Saturday, January 10, 2004, 10:27:47 PM, you wrote:

RW> I came up with a set of rules which appear to catch the new strain
RW> of spam with a meaningless jumble of words in the body, while hope-
RW> fully not catching any legitimate mail.  See below; comments welcome,
RW> and (naturally) everyone is free to use these rules if you want to.

The single rule I use for these is:

header    RM_hxm_mPOPwebMail     X-Mailer =~ /mPOP Web-Mail/
describe  RM_hxm_mPOPwebMail     Uses mPOP Web-Mail Mailer often used by spammers
score     RM_hxm_mPOPwebMail     9.000  # 855s/0h of 87289 corpus (70035s/17254h)

I don't find any indication anywhere on the Web that mPOP is used for
anything but spam. If anyone can provide evidence that it can be used for
ham on a valid webmail site, I'll lower the score.

Bob Menschel




-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to