On Tue, 31 Jul 2007, Jari Fredriksson wrote:

> [EMAIL PROTECTED] wrote:
> > looking at a piece of spam that was scored low, I noticed
> > 
> > X-Originating-IP: [383.552.476.5]
> > 
> > Wouldn't that be a nice thing to score on?
> > 
> > Wolfgang Hamann
> 
> Bayes learns it. What's so nice in it in your opinion?

An obvious spam sign.

untested rule:

header XIP_bogus X-Originating-IP =~ 
/[\[\.](?:25[6-9]|2[6-9][0-9]|[3-9][0-9][0-9])[\]\.]/
score  XIP_bogus 3.00

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]    FALaholic #11174     pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  It is not the business of government to make men virtuous or
  religious, or to preserve the fool from the consequences of his own
  folly.                                              -- Henry George
-----------------------------------------------------------------------
 4 days until The 272nd anniversary of John Peter Zenger's acquittal


Reply via email to