On Thu, 25 Jun 2009, Isabel Billings wrote:
> Received: from syslang.net (localhost.localdomain [127.0.0.1])
> by saturn.syslang.net (8.14.3/8.14.3) with ESMTP id n5PEGcRM032298;
> Thu, 25 Jun 2009 10:16:39 -0400
> Received: from domenico32832c ([217.202.8.48])
> by saturn.syslang.net (8.14.3/8.14.3) with SMTP id n5PEGPqs032265;
> Thu, 25 Jun 2009 10:16:28 -0400
> Date: Thu, 25 Jun 2009 16:14:51 +0000
> From: Isabel Billings <harrietsussexsutherl...@toddlertruestories.com>
> Subject: rudimentary gibberish
> To: <tmm-ow...@syslang.net>, <cutsyslang...@syslang.net>,
> <earthlink....@syslang.net>, <man-bytes-...@syslang.net>,
> <tmm-requ...@syslang.net>
> Message-id: <9768176595.20081111185...@toddlertruestories.com>
> Organization: toddlertruestories.com
> MIME-version: 1.0
> Content-type: text/plain; charset=us-ascii
> Content-transfer-encoding: 7bit
> X-Priority: 3 (Normal)
> X-Virus-Scanned: ClamAV 0.94.2/9506/Thu Jun 25 07:52:03 2009 on
> saturn.syslang.net
> X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on saturn.syslang.net
> X-Virus-Checked: Checked by ClamAV on apache.org
> X-Old-Spam-Status: No, score=4.0 required=5.0
> tests=BAYES_50,RCVD_IN_PBL,RDNS_NONE,
> RELAYCOUNTRY_IT autolearn=no version=3.2.5 country=IT
>
> stopwatch sussex trait
> warmup sporadic
>
first of all, I agree with Benny, don't bounce, it obscures the question
you're asking.
I -assume- you're asking for help catching that kind of "rudimentary
gibberish". Suggestions:
1) botnet plugin (but adjust scoring to work with your mail stream).
2) train your bayes.
3) consider using RBLs at the MTA level, zen/pbl at the MTA level
would outrgiht block that garbage.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
