On Fri, 23 Jan 2004, Who Knows <[EMAIL PROTECTED]> wrote:
> Anthony Martinez wrote:
> > I got a spam today where the X-Originating-IP header wasn't a number.
>
> I have been receiving a good many of these lately. I am hestant to add
> any rules for them yet because all the ones I have been receiving seem
> to also contain a list of words that can only be there to spoil baysian
> tracking.
To clarify: Do you mean the X-Originating-IP header has those random
words? (In which case, I haven't seen any of these and would be
interested.) Or do you mean the body has those random words, and the
X-Originating-IP header is in the form:
X-Originating-IP: [530000x.comIP]
If it's the latter, that's a piece of ratware that is detectable. See the
latest rnd_uc_char.cf ruleset at
http://kepler.acns.bethel.edu/~bjn/spamassassin/
--
Brent J. Nordquist <[EMAIL PROTECTED]> N0BJN
Other contact information: http://kepler.acns.bethel.edu/~bjn/contact.html
* Fast pipe * Always on * Get out of the way - Tim Bray http://tinyurl.com/7sti
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
