> >  From large providers i sometimes recieve messages through encrypted
> > smtp, the header looks smth like this (qmail):
> >
> > ...  with (AES256-SHA encrypted) SMTP; ...
> >
> > Would it be a good idea to give a minimal negative score on this -0.1 or
> > -0.2 if this happens on the last hop? - It proves that the sending smtp
> > server is very protocol sane, which spambots are usually not.

On 16.07.07 14:40, Matthias Leisi wrote:
> Maybe spambots are not protocol-sane, but (abused) legitimate mailservers
> are. Just because a message was delivered through TLS does not indicate
> whether it's legitimate or not.

we can tell this about any of SA rules ;-) score -0.1 should be OK 

> According to my experience, the ham/spam ratio over TLS is roughly 50/50
> (which is still better than the ham/spam ratio for non-TLS traffic).

so you are actually saying that checking for ssl/tls is good way to score :)

-- 
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759

Reply via email to