On Mon, 26 Mar 2007, Giampaolo Tomassoni wrote:
By "black-listing" URI's host IPs, one could easily score high this kind of e-mails. Maybe there is also some RBL regarding web hosts, by the way. Is it?
You mean URIBL? Not only does it exist, it's included with SA. If the URIBL_* family of rules aren't among your top 5 most effective, something is seriously wrong with your SA installation. FWIW, the OP's message scored 31.3 on my system, as it hit Razor2 and two URIBL rules (the scores for which I crank up). Chris St. Pierre Unix Systems Administrator Nebraska Wesleyan University ---------------------------- Never send mail to [EMAIL PROTECTED]