On Tue, 29 Jan 2008 20:22:59 -0500 Theo Van Dinter <[EMAIL PROTECTED]> wrote:
> On Tue, Jan 29, 2008 at 07:51:03PM -0500, Robert Fitzpatrick wrote: > > I have some users getting slammed with this spam. Before I start > > trying to figure out how to intercept, can someone test this > > message and tell me if your getting a score above 5.0? > > > > http://esmtp.webtent.net/test.txt > > > > 2.5 MISSING_HB_SEP Missing blank line between message > > header and body > > This appears to be a badly pasted email. For example, the topmost > Received header (and then a lot of the rest of the headers) is > malformed. > > Hitting MISSING_HB_SEP w/ real mails is possible, but very uncommon. > If you see it hitting somewhere, you're more likely to have a > misconfiguration in your setup than a valid hit. That explains why my test results were so high. ------ _|_ (_| |
