Hello Bob, Sunday, January 18, 2004, 5:59:29 PM, you wrote:
BA> Based on SPAM-L posts from admins at Outblaze (Suresh) and rambler.ru, I BA> conjured up a few simple rules to detect forgeries from these domains: BA> header RAA_FORGED_FROM_OUTBLAZE Received =~ /\.mr\.outblaze\.com/ BA> describe RAA_FORGED_FROM_OUTBLAZE Received line forged to implicate Outblaze/Mail.com BA> score RAA_FORGED_FROM_OUTBLAZE 3.0 BA> header RAA_FORGED_FROM_RAMBLER Received =~ /imx[12]\.rambler\.ru/ BA> describe RAA_FORGED_FROM_RAMBLER Received line forged to implicate rambler.ru BA> score RAA_FORGED_FROM_RAMBLER 3.0 Just a quick FYI -- Your first rule hits 185s/0h of 91714 corpus (74113s/17601h) 01/19/04 The second rule hits no spam nor ham here. Bob Menschel ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
