Michael Alan Dorman wrote:
On Thu, 16 Nov 2006 17:56:21 -0800
Derek Harding <[EMAIL PROTECTED]> wrote:
On Sun, 2006-11-12 at 17:26 -0800, John Rudd wrote:
http://people.ucsc.edu/~jrudd/spamassassin/RelayChecker.tar
I've been running this for a few days now and am finding it to be
pretty effective, especially against the bots that are producing all
the image spam.
Currently it's running about 87.55% hit rate with only two false
positives so far (one a company on adsl, the other a mail server with
no reverse DNS).
For reasons that I haven't investigated closely, I'm finding
RelayChecker consistently tags mail from the dojo toolkit's mailing
list as well as the catalyst toolkit's mailing list.
I lowered the score from 6 to 4.5, though, and it's continued to be
effective, while letting those emails through.
Mike.
Can you post the Received headers for messages from those two mailing
lists? (maybe send them to me off-list)
I'll figure out something to put in the readme file to help mitigate it.
(someone else contacted me off list for a feature suggestion of
"keywords that indicate a host that should NOT be triggered", such as
"mail" or "smtp" in the hostname; I'll be trying to work that into the
next version too)
